Malware Threats via Pirated Software Downloads

Attackers Targeting Pirated Software Downloads

Attackers are targeting people interested in pirated and cracked software downloads by abusing YouTube and Google search results. Researchers from Trend Micro uncovered the activity on the video-sharing platform, where threat actors are posing as "guides" offering legitimate software installation tutorials to lure viewers into reading the video descriptions or comments, where they then include links to fake software downloads that lead to malware.

Fake Software Downloads on YouTube

The researchers revealed this activity in a recent blog post. On YouTube, attackers are seeding search results for pirated and cracked software with links to what appear to be legitimate downloaders, but which in reality also include infostealing malware.

Malware Threats on Google

On Google, attackers are seeding search results for pirated and cracked software with links to what appear to be legitimate downloaders, but which in reality also include infostealing malware, the researchers said.

Social Engineering Tactics

As shown by the threat activity, attackers continue to use social engineering tactics to target victims and apply a variety of methods to avoid security defenses, including:

• Using large installer files
• Password-protected zip files
• Connections to legitimate websites
• Creating copies of files and renaming them to appear benign

Defending Against Malware Threats

To defend against these attacks, organizations should "stay updated on current threats and to remain vigilant regarding detection and alert systems," the researchers wrote. "Visibility is important because solely relying on detection can result in many malicious activities going unnoticed."

Employee Training and Awareness

Employee training, as security experts often note, also goes a long way in ensuring employees don’t fall for socially engineered attacks or try to download pirated software.

Protect Your Organization From Malware

Stay informed about the latest malware threats and take steps to protect your organization from these attacks.