Hackers are using TikTok videos offering free Spotify Premium to spread malware and steal passwords

▤ Summary

Hackers are using short-form video platforms like TikTok and Instagram Reels to lure users with fake offers for free Spotify Premium, Microsoft, Adobe, and Windows subscriptions. The attack instructs victims to run a PowerShell command that downloads and installs Vidar infostealer malware. That malware can steal passwords, cookies, session tokens, crypto wallet data, files, and other sensitive information. The report highlights how social engineering is shifting from email phishing to user-executed commands on attacker-controlled sites. It also reinforces basic defenses such as multi-factor authentication and downloading software only from official vendors.

▦ Linked Companies

Gravit Open Network

$5M to $10M