Trend Micro discovered a dangerous campaign on TikTok where cybercriminals are tricking users into downloading harmful malware like Vidar and StealC through viral videos.
Scam videos offer free software downloads, but actually execute PowerShell commands to download and run malicious programs like StealC or Vidar, changing registry keys for persistence and erasing temporary folders to avoid detection.
Cybercriminals are now using AI-generated, deepfake-like videos on platforms like TikTok, YouTube, Instagram to distribute malware, as they are more convincing to users and pose dangers like extracting login info, cookies, and cryptocurrency data.
To protect against such threats, users are advised to avoid free software activation tutorials, use trustworthy antivirus programs, monitor account activities, and utilize breach monitoring services for data security.