A cryptocurrency-stealing malware campaign leverages trusted platforms like GitHub, YouTube, and VirusTotal to build false legitimacy for malicious trading bots and gambling predictors. Attackers artificially inflate GitHub activity, post positive reviews and tutorials, and manipulate VirusTotal comments to trick users into downloading the malware, which is packaged as tools promising financial gain.
A cryptocurrency-stealing malware campaign used inflated GitHub activity, software reviews, YouTube tutorials and favorable VirusTotal comments to make malicious trading and gambling tools appear trustworthy, Check Point researchers found. According to the researchers, the attackers packaged the malware as tools designed to help users make money. The offerings included cryptocurrency sniper bots and gambling “predictors” that claimed to identify winning opportunities before other traders or forecast the outcome of online betting games. Instead of quick … More → The post Cybercriminals abused GitHub, YouTube and VirusTotal to push crypto-stealing malware appeared first on Help Net Security .