Safe Not Scammed

Malware Lurks on YouTube

Published 2 months ago • 1 min read

Issue #10

Malware Lurks on YouTube

Ahoy there, fellow Netizens! This week, let’s talk about YouTube. If you need a tutorial about anything computer related, YouTube is a great place to look! Unfortunately, hackers know this, and are using it to trick viewers into downloading malware.

Proofpoint, a cybersecurity company, released a report earlier this week describing what’s been going on. Essentially, the unknown cybercriminals are creating YouTube videos describing how to get premium software or game cheats for free. They include a link in the description so you can download the “software,” but if you follow the instructions, you’ll end up installing an infostealer on your device.

An infostealer does exactly what it sounds like: steals your data. This includes things like your saved passwords, and even your cookies, which hackers can use to access your accounts while completely bypassing two-factor authentication.

Unfortunately, some of the malware promoting videos have been uploaded by “verified” YouTube accounts, giving them more legitimacy. However, those accounts were likely either hacked or sold, so it’s not the original content creator who is behind the videos.

While Proofpoint reported “over two dozen” accounts, which YouTube removed, a cursory search on YouTube reveals many new videos popping up. One compromised verified account I found yesterday had uploaded no less than 19 videos promoting malicious game cheats on the same day.

While savvy viewers will probably not be fooled by these tactics, children looking for a free upgrade or hack for their favorite game might. So be sure to talk to your own kids and warn parents about the malicious YouTube videos.

Until next time, stay safe out there!

113 Cherry St #92768, Seattle, WA 98104-2205
Unsubscribe · Preferences

Safe Not Scammed

Rebecca Morris

Subscribe to my weekly newsletter to keep up with the latest hacks, scams and privacy violations, plus what you can do to protect yourself!

Read more from Safe Not Scammed

Issue #16 Is Recall Worth the Risk? Image made using Canva Ahoy there, fellow Netizens! This week, let’s talk about Microsoft’s latest controversial feature: Recall. Recall is currently available on Microsoft’s AI powered Copilot+ PCs. It allows you to retrace what you were doing on your computer up to three months ago. It does this by taking screenshots every five seconds and storing them locally on your machine, allowing you to explore them later in a timeline format or via search. While...

12 days ago • 1 min read

Issue #15 Be Wary of Google's AI Overview Image made using Canva Ahoy there, fellow Netizens! Today, let’s talk about Google’s AI Overview, which you’ll soon see integrated into Google Search. As its name suggests, AI Overview (previously known as SGE or Search Generative Experience) provides an AI generated summary of the search results for certain queries. And, to make sure you can’t miss it, Google places it right at the top of the search results page. When experimenting with AI Overview,...

26 days ago • 1 min read

Issue #14 Vastaamo Hacker Sentenced Image made using Canva Ahoy there, fellow Netizens! Before getting to this week’s story, I have a quick announcement. Going forward, I’ll be sending this newsletter out once every two weeks instead of once every week. I hope you’ll continue to enjoy the newsletters, even though they’ll be a little less frequent! Now, let’s talk about Julius Kivimäki, a 26-year-old Finnish hacker who was sentenced to prison earlier this week for his attack on Finnish...

about 1 month ago • 1 min read
Share this post