YouTubers Blackmailed Into Promoting Crypto Mining Malware: Kaspersky
Criminals are blackmailing YouTube creators to add crypto-mining malware, specifically SilentCryptoMiner, to their videos. Kaspersky reports a rise in the use of Windows Packet Divert drivers in Russia, detected on 2.4 million devices over six months. Hackers insert links to malware in video descriptions, exploiting copyright strikes to coerce creators. One YouTuber with 60,000 subscribers unknowingly linked to infected content, leading to over 40,000 downloads. Kaspersky estimates around 2,000 computers in Russia have been infected, with potential for higher numbers from other campaigns. SilentCryptoMiner, based on XMRig, mines cryptocurrencies like Ethereum and Monero. The malware uses process hollowing for injection and can be remotely controlled. Cybercriminals are evolving tactics by leveraging influencer trust to create infection opportunities. Users are advised to verify download sources and exercise caution with files suggested by creators.
