Windows Packet Divert drivers are being used in tools designed to bypass restrictions for accessing foreign resources, leading to a surge in detections.
Cybercriminals are distributing malware disguised as restriction-bypassing tools by blackmailing bloggers.
Enthusiasts creating bypassing tools unknowingly contribute to the spread of malware, including stealers and miners.
Developers of such tools recommending disabling antivirus protection pose a significant risk to users' devices.
Bloggers have been unknowingly involved in distributing malware through YouTube channels, with malicious links in video descriptions.
Hackers manipulate bloggers into sharing malicious links by filing complaints against their videos and coercing them to comply.
A miner distribution campaign in Russia targeted unsuspecting victims through YouTube channels and malicious archives.
SilentCryptoMiner, a stealthy miner based on XMRig, was included in the malicious archive, supporting mining of popular cryptocurrencies.
Protecting personal devices with trusted security software is crucial to prevent malware, including miners, from compromising systems.
Users are advised to avoid downloading programs from unknown sources and remain cautious even with content shared by reputable bloggers.