The Nigerian Communications Commission (NCC) recently alerted the public of a growing trend in cyber criminal gangs that are using AI-generated YouTube videos to distribute malware. The Director of Public Affairs of the NCC, Reuben Mouka, stated in a recent notice that these gangs are distributing data-stealing malware to stimulate the interest of potential victims through bogus tutorial videos on sought-after software such as AutoCAD and Adobe Photoshop.
The NCC-CSIRT (Computer Security Incident Response Team) has warned those looking to acquire pirated software that they risk becoming victims of malware attacks, with potential damaging results such as data theft, financial loss, identity theft, and system damage. According to the advisory, there has been a sharp increase of 200 to 300% in the number of YouTube videos containing malicious links since November 2022.
For unsuspecting victims, clicking on one of the links in the video description results in the unintentional download of data-stealing malware. Furthermore, malicious actors are creating AI-generated videos containing hidden malware that can infect a viewer’s device when the video is played or downloaded. Phishing scams are also being distributed through such AI-generated videos, prompting viewers to enter their login credentials or personal information on fake websites. Finally, malicious actors are utilizing AI-generated videos to distribute ransomware, locking out users from their files until a payment is made.
Therefore, the NCC-CSIRT advises telecom users to avoid downloading pirated software as they can be illegal and generally harmful.
The Nigerian Communications Commission (NCC) is an independent industry regulator in the country, dedicated to protecting the interests of Nigerian telecom stakeholders. It is responsible for planning, promoting and regulating the ICT industry in the country. Reuben Mouka is the current Director of Public Affairs of the NCC, premiering a career in the Nigerian telecommunication industry.