Hackers are using TikTok videos offering 'free Spotify Premium' to spread malware and steal passwords

Date:
Thu, 11 Jun 2026 16:20:00 +0000

Description:
Videos advertising free subscriptions are leading victims away to download
and install malware via command-line tools.

FULL STORY ======================================================================Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Subscribe to our newsletter TikTok and Instagram Reels now being used to target victims "Free" Spotify, Microsoft, Adobe subscriptions targeting cash-strapped users Social engineering is still the top vector, but basic account security measures do a lot of the heavy lifting A new report from ReversingLabs is warning doomscrollers of videos spreading across short-form platforms like TikTok and Instagram Reels infecting users with password-stealing malware.

The videos typically promise free access to subscriptions like Spotify Premium, Windows, Office and Adobe an instant, telltale sign that things might not be as they seem. Instead of receiving phishing emails, victims are instructed to open command-line tools like PowerShell, then paste and run the command shown in the video. Latest Videos From Watch full video here: Watch out for this info stealing malware When they run the command, it triggers a piece of malware to be downloaded and installed to a victim's computer.
Vidar, the infostealer, targets usernames, passwords, cookies, session
tokens, cryptocurrency wallet data, personal files and documents, and other sensitive information.

But more importantly, it marks a significant change previously, email phishing campaigns have been extremely popular for gaining access to victims' credentials, with a simple click of a link leading to potential disaster.
This newer method relies on victims physically inputting commands into a
tool, which requires more patience. You may like TikTok for Business accounts targeted in phishing campaign here's how to stay safe This devious Android malware has returned disguised as TikTok or streaming apps Hackers target LinkedIn accounts with devious new phishing attack

Ultimately, the attack exploits current economic strains and the fact that consumers are looking out for cheap and free alternatives to popular subscriptions.

"This kind of social engineering is an easy way for threat actors to drive traffic off social media and onto an attacker-controlled malicious website," the researchers wrote. Are you a pro? Subscribe to our newsletter Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed! Contact me with news and offers from other Future brands Receive email from us on behalf of our trusted partners
or sponsors By submitting your information you agree to the Terms &
Conditions and Privacy Policy and are aged 16 or over.

Regardless, the overarching theme is that social engineering remains the clearest path for attackers to reach victims, and that's good news because there are many basic principles could-be victims can follow, like using multi-factor authentication to secure accounts.

Being wary of suspiciously cheap or free products/services and only downloading software from official vendors would also help in this instance. Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.



======================================================================
Link to news story: https://www.techradar.com/pro/security/hackers-are-using-tiktok-videos-offerin g-free-spotify-premium-to-spread-malware-and-steal-passwords


--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)