Kaspersky: SilentCryptoMiner Malware Targeting YouTubers | Airdrop Alert Pro

Cybersecurity company Kaspersky revealed YouTube Crypto malware ransomware, which attackers used the platform’s copyright strike system to force influencers to add malicious links to their video descriptions.

These actions instruct unsuspecting viewers to download malware infections in the case of YouTube content creators introducing ransomware.

Kaspersky reveals SilentCryptominer

Kaspersky’s report shows that hackers exploit the trust that YouTube influencers have built with their audiences, making the sport particularly dangerous. It references malware activity, where cybercriminals distribute masquerading malware as tools to bypass digital restrictions.

Specifically, hackers use copyright complaints, threats and ransomware YouTube content creators to promote SilentCryptominer. SilentCryptominer is a refined Crypto mining Based on popular Trojan horses Open source mining software XMRIG.

According to reports, malware Mine cryptocurrency For example, Ethereum (ETH), Ethereum Classic (ETC), monero (xmr), and ravencain ((RVN). It also uses the Bitcoin blockchain to maintain control over the botnet.

Over the past six months, Kaspersky has discovered more than 2.4 million instances of Windows packaging drivers. Cyber ​​criminals reportedly use these to manipulate network traffic. They offer many tools as legitimate software solutions, but contain hidden malicious payloads.

Once installed, the malware persists on the victim’s system. Bypassing security measures And modify key system files.

In the report, Kaspersky highlighted a case in which a YouTuber with 60,000 subscribers helped distribute malware without knowing it. The creator initially posted a video showing how to bypass certain online restrictions and provides links to assumed restriction bypass tools.

However, the file is infected by SilentCryptominer. Later, they edited the infected video description to remove the link and warned that the program “does not work”.

“Next, the attackers threatened the content creators with the excuse of copyright infringement, asking them to post videos with malicious links or possibly shut down their YouTube channel. In this way, the scammers were able to manipulate the reputation of popular YouTubers, forcing them to post links to infected files,” he said. read Excerpts from the report.

Use copyright strikes to coerce YouTuber

In a more sinister move, the hackers also made false copyright claims against YouTubers who refused to cooperate. By threatening content creators to use the channel to delete, cybercriminals force them to distribute malware.

Cybersecurity experts warn that YouTube and other social media platforms may not be the only targets of such ransomware programs. Bad actors will be here soon telegraph and other messaging platforms where influencers interact with the community.

Therefore, users should be cautious when downloading software from unverified sources. Seemingly useful tools can serve as a portal for malicious activities. At the same time, the discovery comes a month after Kaspersky revealed another professional Cybersecurity Threats.

“Our experts have discovered a new data-stealing Trojan horse, Sparkcat, active in the App Store and Google Play since at least March 2024. SparkCatLeverages Machine Learning To scan the image gallery, steal cryptocurrency wallet recovery phrases, passwords and other sensitive data hidden in screenshots,” the company said. claim.

This highlights the growing risks faced by cryptocurrency investors. As YouTube influencers become the primary target of cybercriminals, blockchain intelligence platform Arkham has begun Track their portfolio.

The new feature is called the “KOL” tag, track There are more than 100,000 followers on X’s influencer’s wallet. This means investors can monitor whether influencers can actually back up the tokens they promote, or that their approval is simply paid advertising. This highlights how the role of influencers expands Social Media.