Hateful hackers attacked Google's YouTube, exploiting a cross-site scripting (XSS) susceptibility on ultra-popular video sharing site, striking above all sections where users post comments.

"Comments were momentarily concealed by default in an hour, and we released a whole fix for the issue in regarding two hours. We're ongoing to study vulnerability to assist prevent alike issues in future," a Google spokesman said using e-mail.

The assault potentially place at risk YouTube cookies of users who visited a cooperation page, but it couldn't be used to access their Google accounts, the spokesman supposed. As a safety measure, YouTube users must log out of their account and log back in again.

The attackers in fact under attack singer Justin Bieber, slot in code into YouTube pages loyal to him so that visitors saw bland messages arise regarding the teen star, and were as well redirected to outer sites with adult content.

An industry source recognizable with circumstances said that whereas the attack itself didn't engage malware infections, such a risk is intrinsic every time users visit any Web page, for example the ones attacker’s redirected users to. It's not obvious if those landing pages restricted malware, but most modern anti-virus software are designed to protect against those threats, this person said.