Proofpoint has warned home computer users not to fall victim to a new campaign designed to trick them into clicking on malware links in YouTube video descriptions.
See also: AZORult malware spreads via fake Google websites
The security provider detected infostealer malware including Vidar, StealC, and Lumma Stealer delivered via the platform. It was disguised as pirated software and hacks for video games and delivered alongside seemingly legitimate content
“The YouTube videos claim to show an end user how to do things like download software or upgrade video games for free, but the link in the video descriptions leads to malware,” Proofpoint explained.
“Many of the accounts hosting malicious videos appear to have been hacked or otherwise acquired by legitimate users, but researchers have also observed accounts that were likely created and controlled by attackers and are active for only a few hours, created solely to transport malware.”
The vendor informed YouTube of more than twenty accounts and videos designed to spread malware links in this way, which the video giant subsequently removed.
Many of the games used as bait were deliberately chosen because they are popular among children, according to Proofpoint, suggesting that the perpetrators are trying to trick those who are less likely to follow online security best practices.
See also: “TicTacToe Droppers” are used to distribute malware
It is possible that they used bots to increase the number of views of these videos, making them appear more credible.
According to Proofpoint, MediaFire and Discord links were frequently used to connect victims to the infostealer malware. The campaign includes “multiple distinct clusters of activity,” and Proofpoint was unable to trace the activity to a specific threat group.
“The techniques used are similar, including using YouTube video descriptions to host malware links and provide instructions to disable antivirus software, as well as using similar file sizes with variation to attempt to bypass detection.”
“Based on the similarities in video content, cargo delivery, and fraud methods, Proofpoint estimates that perpetrators are consistently targeting non-business users.”
See also: TheMoon malware infected 6,000 ASUS routers
What are the modern methods of protection and prevention from malware?
Modern methods of protection and prevention from malware, such as malicious links in YouTube videos, include the use of reliable security software. This software should include antivirus, antispam, and protection . In addition, users should keep their operating system and applications up to date. These updates often include security patches that can protect the computer from a malware attack. User education is also crucial. Users should be aware of the tactics used by attackers, such as phishing, and be careful with the emails and messages they receive. Finally, the use of VPN networks can help protect against malware. VPNs encrypt your communication on the internet, making it more difficult for attackers to intercept.
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
Source: infosecurity
