Now a user who wants to view your video can be tricked into performing any action the attacker intends - even potentially harmful ones, like downloading malware or being taken to online scams.