The Nigerian Communications Commission’s Computer Security Incident Response Team (NCC-CSIRT) is actively warning individuals and organizations looking to acquire pirated software and resources that this can result in cybercriminal gangs using AI-generated YouTube videos to distribute malware. This is a serious issue, with potential consequences such as data theft, financial loss, identity theft, system damage, and reputation damage being possible.
These videos are usually convincing, as they are created using AI and feature humans in order to appear more trustworthy. Moreover, the videos include tutorials on how to pirate popular software like AutoCAD, Adobe Photoshop, Adobe Premiere Pro and others. The problem with this is that these videos tend to include links in the description that can dupes viewers into downloading data-stealing malware. What’s worse, the number of Youtube videos with such malicious links has increased by 200-300% since November of 2022.
In addition, malicious actors have started to use AI-generated videos to distribute harmful content as well. For example, videos may look like legitimate updates or security patches but in reality contain malware that cripples the viewer’s system. Even phishing attempts are being made, as cybercriminals create videos that prompt viewers to click on links which direct them to a fake website where their personal information is stolen. Scams don’t stop here. AI-generated videos can also be used to distribute ransomware, locking out people from their system and demanding payment for access.
To try and protect individuals and organizations, NCC-CSIRT recommends avoiding the obtainment of pirated software altogether (as it is usually illegal) and making sure endpoint detection and antivirus with internet security are installed and up to date. It is also important to think before downloading or clicking any links.
Ultimately, with the increasing sophistication of malicious actors and the versatile methods they use to spread malware, it is essential to stay informed and aware in order to protect yourself and your organization when it comes to pirated software and other dangers posed by the web.
