"In the example video posted by Mertens, a scammer has posted content -- with over 500 likes -- which pretends to provide watchers with an easy way to activate Photoshop for free. The victim is asked to start PowerShell as an administrator and trigger one line of code, which then executes "Updater.exe," which is actually AuroStealer, a Trojan designed to steal credentials and system information. An additional shellcode is also launched in memory."
"TikTok is being exploited as a delivery platform to spread information-stealing malware and other payloads, with free software acting as the bait. ZDNET explored TikTok for similar videos and it was surprising how many were live. For example, in the screenshot below, the author was promoting a fake way to download and install Adobe Photoshop without the need for a license. Other examples we found included fake, free ways to license Microsoft Windows."
Malicious actors are using TikTok to distribute information-stealing malware by offering pirated or free software as bait. ClickFix social engineering prompts victims to run commands or shortcuts that execute payloads. One example instructs users to launch PowerShell as administrator and run a single line that executes Updater.exe, which is actually AuroStealer, a trojan that steals credentials and system information while additional shellcode runs in memory. Investigations found many live videos promoting fake activators for Adobe Photoshop and Microsoft Windows. ClickFix attempts to bypass anti-phishing defenses by convincing users to 'hack' themselves through provided instructions.
Read at ZDNET
Unable to calculate read time
Collection
[
|
...
]