Fake Software Tutorials on Social Media Spread Vidar Infostealer Malware

Cybercriminals are using TikTok and Instagram Reels to distribute the Vidar infostealer malware through fake software tutorials. These videos promise free access to premium applications like Spotify Premium and Microsoft Word, misleading users into executing terminal commands that download malware. Two campaigns have been identified: one featuring polished tutorials and another using casual clips to bait users into clicking links to malicious sites. The malware, sold as a service, can steal sensitive information such as passwords and banking data. Videos have gained significant traction, with one tutorial reaching over 109,000 views. The attack method exploits social media algorithms favoring saved and shared content, making it challenging to combat. Organizations are advised to enhance training and encourage reporting of suspicious content.

Key Points: • Cybercriminals exploit social media platforms to distribute Vidar infostealer malware. • Fake tutorials promise free premium software, misleading users into executing harmful commands. • One video reached over 109,000 views, highlighting the effectiveness of this attack method.