Galaxy

Read

<div data-beyondwords-player="true" contenteditable="false"></div>
The Nigerian Communications Commission&#8217;s Computer Security Incident Response Team (<a href="https://ncc.gov.ng/technical-regulation/cybersecurity#:~:text=NCC%20Computer%20Security%20Incidence%20Response%20Team%20(CSIRT)&amp;text=The%20Overall%20function%20of%20the,and%20inhibiting%20computer%20security%20incidents." target="_blank" rel="noopener">NCC-CSIRT</a>) has warned those looking to acquire pirated software and resources that they risk becoming victims of cybercriminal gangs using AI-generated YouTube videos to distribute malware. 



NCC-CSIRT further warned in its advisory that the consequences of becoming a victim could be significant for individuals and organizations, resulting in critical damage like data theft, financial loss, identity theft, system damage, and reputation damage.



According to the statement seen by Technext, unaware viewers of these AI-generated educational films would be tricked into clicking on one of the links in the video description, which typically leads to the download of malware that steals data. 



<figure class="wp-block-image size-full"><img width="739" height="415" src="https://technext24.com/wp-content/uploads/2023/03/image-181.png" alt="" class="wp-image-186793"/></figure>



<figure class="wp-block-pullquote"><blockquote>Since November 2022, there has been a 200–300% month-over-month increase in the number of YouTube videos that contain these links.</blockquote></figure>



According to the advisory, “To stimulate the interest of potential victims, video tutorials on pirating sought-after software such as AutoCAD, Adobe Photoshop, Adobe Premiere Pro, and other similar paid-for software are created. These videos are created with AI and feature humans with facial features that research has shown other humans find trustworthy.



“The tutorials in these videos are frequently bogus and steer viewers to links in the description that led to information-stealing malware like Raccoon, Vidar, and RedLine,” the advisory revealed.



Read also: <a href="https://technext24.com/2023/03/14/ncc-directs-harmonised-shortcodes-may-17/">NCC directs all mobile network providers to complete implementation of harmonised shortcodes by May 17</a>



<h4 id="more-on-the-ncc-advisory-on-possible-youtube-malware">More on the NCC advisory on possible YouTube malware</h4>



Malicious actors can create AI-generated videos that include hidden or disguised malware. These videos may appear harmless or entertaining, but they can contain malicious code that can infect a viewer&#8217;s device when the video is downloaded or played.



<figure class="wp-block-image size-full"><img width="942" height="552" src="https://technext24.com/wp-content/uploads/2023/03/image-183.png" alt="" class="wp-image-186798"/></figure>



Cybercriminal actors can also use AI-generated videos to trick viewers into downloading malware. For example, they can create a video that appears to be a legitimate software update or security patch but contains malware that infects the viewer&#8217;s device.



They equally use AI-generated videos to distribute phishing scams. They can create a video that appears to be from a legitimate company or organization and prompts viewers to click on a link to enter their login credentials or personal information. According to the team, once the viewer clicks on the link, they are directed to a fake website that steals their information.



Additionally, malicious actors can use AI-generated videos to distribute ransomware. They can create a video that appears to be harmless, but when the viewer clicks on a link or downloads a file associated with the video, their device becomes infected with ransomware that locks them out of their files and demands payment to regain access.



<figure class="wp-block-image size-full"><img width="1024" height="570" src="https://technext24.com/wp-content/uploads/2023/03/image-182.png" alt="" class="wp-image-186794"/></figure>



NCC-CSIRT said that telecom consumers should avoid downloading pirated software because it is generally harmful and illegal to avoid becoming a victim.



Furthermore, the advisory recommends the installation of antivirus software with internet security and keeping it up to date, installing an endpoint detection and response (EDR) solution that is comprehensive, and thinking before clicking any link.



Read also: <a href="https://technext24.com/2023/02/10/ncc-urges-nigerian-samsung-users-to-upgrade/">NCC urges Nigerian Samsung users to upgrade their Galaxy Store applications to avoid cyberattacks</a>

Nigerian telco regulator warns users of pirated YouTube software-related malware

Technext.ng

Other articles published on Mar 27, 2023

The Power Struggle: Crypto vs. Governments and the Battle for Financial Control

SuperEx Medium Call for Submissions Q&A

🗒 Daily Newsletter | Tuesday, Mar 21, 2023

CFTC Sues Binance and CEO “CZ” – Here’s All You Need To Know

Transfer Disclosure (1,420 WEMIX)

Big Firms Loved the Metaverse Not Long Ago; Now They’re Abandoning It

Join our free newsletter for daily crypto updates!