AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |
Back to Blog
Yt downloader malware4/17/2023 ![]() ![]() Users looking to actively defend against this malware, or who think they may already have been targeted, should know that the RedLine trojan contains files named as follows: Makisekurisu.exe, cool.exe, AutoRun.exe, download.exe, and upload.exe. Fortunately, after this year's crypto crash and Ethereum's " merge," it's far less likely that hackers will continue to seek graphics cards to mine since it's become less profitable, so perhaps this may become one less security threat to worry about. Gamers are more likely to have powerful GPUs installed which can mine crypto. The payload also contains crypto mining software. YouTube has already shut down the compromised channels, but users should watch out for suspicious links on the site in case this propagation method becomes more popular in the future. The videos mention games including Final Fantasy XIV, Forza, Lego Star Wars, Rust, Spider-Man, Stray, VRChat, DayZ, F1 22, Farming Simulator, and more. The descriptions for the uploaded videos contain links purporting to lead to the advertised hacks, but instead, they lead to the trojan that uploaded the videos. It downloads videos onto a victim's machine advertising cheats and cracks for many popular PC games, then uploading them to the victim's YouTube channel. Furthermore, the malware could open links in the system's default browser to download and open programs.įrom there, the malware can propagate using an even more elaborate scheme. It could also steal information from crypto wallets, instant messaging software, FTP, SSH, and VPN clients. ![]() Once activated, the payload also known as RedLine can steal data from Chrome, Firefox and Chromium-based browsers, including autofill information, usernames, passwords, cookies, and banking credentials. In March 2020, Kaspersky discovered a trojan that bundles together multiple malicious programs that hackers used to spread through spam e-mails or third-party loaders. The malware can steal various kinds of credentials from a victim's system, then use them to trick more users. Hackers may have compromised the channels hosting the videos, turning them into vectors for spreading malware that can steal login credentials.Ī new report from Kaspersky describes a malware campaign targeting gamers through YouTube. ![]() WTF?! Gamers looking to download cheats and cracks should beware of links in YouTube video descriptions. ![]()
0 Comments
Read More
Leave a Reply. |