New malware bundle self-spreads through YouTube gaming videos

[[correlate]]

Content source

https://www.bleepingcomputer.com/news/security/new-malware-bundle-self-spreads-through-youtube-gaming-videos/

A new malware bundle uses victims' YouTube channels to upload malicious video tutorials advertising fake cheats and cracks for popular video games to spread the malicious package further.

The self-spreading malware bundle has been promoted in YouTube videos targeting fans playing FIFA, Final Fantasy, Forza Horizon, Lego Star Wars, and Spider-Man.

These uploaded videos contain links to download the fake cracks and cheats, but in reality, they install the same self-spreading malware bundle that infected the uploader.

New malware bundle self-spreads through YouTube gaming videos

A new malware bundle uses victims' YouTube channels to upload malicious video tutorials advertising fake cheats and cracks for popular video games to spread the malicious package further.

www.bleepingcomputer.com

 

[Kongo]

And once again they are increasing the file size of the malicious exe by adding junk data without any function, so that some AVs and online malware analysis platforms can't scan the file because it exceeds the file size limit in order for them to scan the file. I already tried to explain it in another thread but I think it's worth sharing here again, so people don't fall for this.

Poisoned CCleaner search results spread information-stealing malware

Malware that steals your passwords, credit cards, and crypto wallets is being promoted through search results for a pirated copy of the CCleaner Pro Windows optimization program. This new malware distribution campaign is dubbed “FakeCrack,” and was discovered by analysts at Avast, who report...

malwaretips.com

 

[artek]

And once again they are increasing the file size of the malicious exe by adding junk data without any function, so that some AVs and online malware analysis platforms can't scan the file because it exceeds the file size limit in order for them to scan the file. I already tried to explain it in another thread but I think it's worth sharing here again, so people don't fall for this.

Poisoned CCleaner search results spread information-stealing malware

Malware that steals your passwords, credit cards, and crypto wallets is being promoted through search results for a pirated copy of the CCleaner Pro Windows optimization program. This new malware distribution campaign is dubbed “FakeCrack,” and was discovered by analysts at Avast, who report...

malwaretips.com

Certain AV labs too. I had a malicious android .apk I sent around to a few vendors (with android offerings) filled with normal files and what I thought was a banking Trojan. I only received two replies from vendors. Only 1 confirmed it was malicious (F-Secure). Microsoft wouldn't analyze the file because it contained too many sub files when unpacked.