Cybercriminals are targeting YouTubers with blackmail tactics to spread crypto-mining malware, according to cybersecurity firm Kaspersky. They exploit YouTube’s copyright strike system to pressure content creators into including malicious links in their video descriptions. This leads viewers to download infected files.
The malware involved is called SilentCryptoMiner. It secretly mines cryptocurrencies like Ethereum, Monero, and Ravencoin by hijacking victims’ devices. The software operates stealthily to avoid detection.
Kaspersky’s research shows that hackers take advantage of the trust YouTubers have with their audiences. They disguise the malware as tools to bypass online restrictions, tricking influencers into sharing them. For example, a YouTuber with 60,000 subscribers unknowingly spread the malware, thinking it was a legitimate tool. After realizing the issue, they removed the link and warned viewers.
Hackers escalate their tactics by falsely accusing YouTubers of copyright violations. If creators refuse to post the malware links, they threaten to take down their channels. Many influencers succumb to this blackmail, fearing the loss of their platforms.
In the last six months, Kaspersky has identified over 2.4 million cases of cybercriminals manipulating network traffic using harmful software disguised as useful tools. These programs can bypass security measures and maintain long-term access to infected computers.
Experts warn that these blackmail tactics could extend to other platforms like Telegram, where influencers engage with their communities. Users are advised to avoid downloading software from unverified sources, as seemingly helpful tools may harbor hidden threats.
Kaspersky also uncovered another threat called SparkCat, a data-stealing Trojan active on the App Store and Google Play. SparkCat uses machine learning to steal sensitive information, including cryptocurrency wallet recovery phrases.
As YouTube influencers become prime targets, blockchain intelligence platform Arkham has launched a feature to track the cryptocurrency wallets of influencers. This helps investors determine if influencers genuinely support the tokens they promote.
With cyber threats evolving, experts urge users to be cautious online, avoid unverified downloads, and stay informed about cybersecurity risks.
