NCC warns of pirated YouTube software-related malware
Comment
The Computer Security Incident Response Team (NCC-CSIRT) of the Nigerian Communications Commission has issued a warning to those looking to purchase illegally obtained software and materials, warning them that they run the risk of falling prey to cybercriminal gangs that use AI-generated YouTube videos to spread malware.
In its recommendation, NCC-CSIRT also cautioned that the risks of being a victim may be high for both persons and companies, with serious implications including data theft, financial loss, identity theft, system damage, and reputation harm.
It claimed that innocent viewers of these AI-generated training films will be tricked into clicking on one of the links in the description of the video, which typically ends in the download of malware that steals personal information. Since November 2022, the number of YouTube videos that contain these links has climbed by 200–300% month over month.
The warning states that “video lessons on how to pirate popular software, including AutoCAD, Adobe Photoshop, Adobe Premiere Pro, and other comparable paid-for software, are intended to pique the attention of potential victims. These movies were produced using artificial intelligence and depict people with credible face characteristics, according to studies.
The advice stated that the instructions in these videos are frequently fake and direct users to links in the description that lead to malware that steals information, such as Raccoon, Vidar, and RedLine.
Videos made by AI that include concealed or obfuscated malware can be produced by malicious actors. These films could seem innocent or even enjoyable, but they might really include harmful malware that, when downloaded or played, might infect a viewer’s device.
AI-generated videos may potentially be used by cybercriminals to lure users into installing malicious software. For instance, they may produce a movie that mimics a real software update or security patch but really includes malware that harms the target device.
They likewise employ AI-produced films to disseminate phishing fraud. They can produce a video that presents itself as coming from a reliable business or organization and asks viewers to click on a link and input their login information or other personal data. When a viewer clicks on the link, a bogus website that takes personal information is opened in their browser.
Moreover, criminal actors might disseminate malware via movies produced by AI. When a viewer clicks on a link or downloads a file connected to the video, their device can get infected with ransomware, which locks them out of their files and demands money to restore access.
According to NCC-CSIRT, telecom users should refrain from downloading pirated software because it is typically dangerous and unlawful in order to prevent being a victim.
The alert also suggests installing up-to-date antivirus software with internet protection, implementing a thorough endpoint detection and response (EDR) solution, and exercising caution when visiting links.
Do you find NaijaBunch useful? Click here to give us five stars rating!