Threat Actors Hack YouTube Channels to Distribute Infostealers (Vidar and LummaC2)

AhnLab SEcurity intelligence Center (ASEC) recently found that there are a growing number of cases where threat actors use YouTube to distribute malware. The attackers do not simply create YouTube channels and distribute malware—they are stealing well-known channels that already exist to achieve their goal. In one of the cases, the targeted channel had more than 800,000 subscribers.

Figure 1. Malware uploaded by a YouTube account with more than 800,000 subscribers

The threat actors who abuse YouTube are mainly distributing …

ahnlab asec attackers cases center found goal hack infostealers intelligence lummac2 malware malware analysis security security intelligence stealing threat threat actors vidar well-known youtube