YouTube Hacked: XSS Attack


YouTube has become a victim of XSS (cross site scripting) attacks.  The attacks which started this morning appear to be the work of a group of 4chan users.  The origin of the attack seemed to revolve around no other then Justin Bieber (screenshot below), claiming that he died in an accident sometime this morning and to visit CNN for more information.  However, it appears that YouTube has been able to successfully stop the scripts from executing now.  Instead of seeing a browser dialog box, the scripts are now rendered useless.

YouTube has also put comments into “Safety Mode” for the time being until the whole thing has fully subsided.