YouTube Ghost Network Distributes Malware via Compromised Accounts

YouTube Ghost Network Distributes Malware via Compromised Accounts

First seen 2 Dec 2025, 18:33 UTC •TheregisterDarkreadingFoxnews •80% similarity •13.7

Article Content

Browse articles
ThreatCluster

In 2025, Check Point Research identified a malware distribution network on YouTube, dubbed the 'YouTube Ghost Network.' This operation utilized compromised accounts and social engineering tactics to spread information-stealing malware disguised as free software, affecting users seeking legitimate content. Google has since removed over 3,000 videos linked to this malicious activity.

ThreatCluster AI How this analysis works

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

Lumma Lumma Stealer Odebug Phemedrone RedLine Rhadamanthys Stargazers Ghost Network YouTube Ghost Network YouTube GitHub Google Sites Windows Windows Defender