NCC-CSIRT warns of malware linked to pirated YouTube software
By Bode Adewumi
The Nigerian Communications Commission Computer Security Incident Response Team (NCC-CSIRT) has warned those seeking to acquire pirated software and resources that they risk falling victim to cyber criminal gangs who use AI-generated YouTube videos to distribute malware.
NCC-CSIRT further warned in its advisory that the consequences of being a victim can be significant for individuals and organizations resulting in critical damage such as data theft, financial loss, identity theft , system damage and reputational damage.
He said that unsuspecting victims, who watch these AI-generated tutorial videos, will be tricked into clicking on one of the links in the video description, which usually results in downloading malware data thieves.
The team said the number of YouTube videos containing such links has increased 200-300% month over month since November 2022.
Related News
According to the notice, "To stimulate the interest of potential victims, video tutorials on how to hack sought-after software such as AutoCAD, Adobe Photoshop, Adobe Premiere Pro and other similar paid software are created.
"These videos are created with AI and feature humans with facial features that research has shown other humans find trustworthy.
"The tutorials in these videos are often fake and direct viewers to links in the description that have led to information-stealing malware such as Raccoon, Vidar, and RedLine."
Malicious actors can create AI-generated videos that include hidden or disguised malware.
These videos may seem harmless or even entertaining, but they may contain malicious code that could infect a viewer's device when downloading or playing the video. Cybercriminals can also use AI-generated videos to trick viewers into downloading malware.
For example, they may create a video that appears to be a legitimate software update or security patch, but contains malware that infects the viewer's device.
They also use AI-generated videos to spread phishing scams. They can create a video that appears to be from a legitimate business or organization and prompt viewers to click a link to enter their login credentials or personal information. Once the viewer clicks on the link, they are taken to a fake website that steals their information.
In addition, malicious actors can use AI-generated videos to distribute ransomware. They can create a video that looks harmless, but when the viewer clicks on a link or downloads a file associated with the video, their device is infected with ransomware that locks them from accessing their files and demands payment to regain the access.
NCC-CSIRT stated that to avoid becoming a victim, telecommunications consumers should avoid downloading pirated software as it is generally harmful and illegal.
In addition, the advisory recommends installing anti-virus software with internet security and keeping it up to date, installing a comprehensive endpoint detection and response (EDR) solution, and thinking before you click a link.
READ ALSO IN NIGERIAN TRIBUNE
By Bode Adewumi
The Nigerian Communications Commission Computer Security Incident Response Team (NCC-CSIRT) has warned those seeking to acquire pirated software and resources that they risk falling victim to cyber criminal gangs who use AI-generated YouTube videos to distribute malware.
NCC-CSIRT further warned in its advisory that the consequences of being a victim can be significant for individuals and organizations resulting in critical damage such as data theft, financial loss, identity theft , system damage and reputational damage.
He said that unsuspecting victims, who watch these AI-generated tutorial videos, will be tricked into clicking on one of the links in the video description, which usually results in downloading malware data thieves.
The team said the number of YouTube videos containing such links has increased 200-300% month over month since November 2022.
Related News
According to the notice, "To stimulate the interest of potential victims, video tutorials on how to hack sought-after software such as AutoCAD, Adobe Photoshop, Adobe Premiere Pro and other similar paid software are created.
"These videos are created with AI and feature humans with facial features that research has shown other humans find trustworthy.
"The tutorials in these videos are often fake and direct viewers to links in the description that have led to information-stealing malware such as Raccoon, Vidar, and RedLine."
Malicious actors can create AI-generated videos that include hidden or disguised malware.
These videos may seem harmless or even entertaining, but they may contain malicious code that could infect a viewer's device when downloading or playing the video. Cybercriminals can also use AI-generated videos to trick viewers into downloading malware.
For example, they may create a video that appears to be a legitimate software update or security patch, but contains malware that infects the viewer's device.
They also use AI-generated videos to spread phishing scams. They can create a video that appears to be from a legitimate business or organization and prompt viewers to click a link to enter their login credentials or personal information. Once the viewer clicks on the link, they are taken to a fake website that steals their information.
In addition, malicious actors can use AI-generated videos to distribute ransomware. They can create a video that looks harmless, but when the viewer clicks on a link or downloads a file associated with the video, their device is infected with ransomware that locks them from accessing their files and demands payment to regain the access.
NCC-CSIRT stated that to avoid becoming a victim, telecommunications consumers should avoid downloading pirated software as it is generally harmful and illegal.
In addition, the advisory recommends installing anti-virus software with internet security and keeping it up to date, installing a comprehensive endpoint detection and response (EDR) solution, and thinking before you click a link.
READ ALSO IN NIGERIAN TRIBUNE
What's Your Reaction?
