Subj : This new malware scam spoofs CapCut video editing links to infect To : All From : TechnologyDaily Date : Mon May 22 2023 17:45:03 This new malware scam spoofs CapCut video editing links to infect your device Date: Mon, 22 May 2023 16:30:59 +0000 Description: Be careful when downloading CapCut, as it might just be an infostealer. FULL STORY ====================================================================== Multiple new malware campaigns have been spotted in which hackers are taking advantage of the recent TikTok bans around the world to deliver infostealers to unsuspecting victims. Cybersecurity researchers from Cyble recently discovered at least five malicious websites, pretending to offer the installation file for CapCut. CapCut is the official video editor and video maker for TikTok, the worlds most popular social media platform right now, allowing users to mix music, add color filters, various animations, generate slow-mo effects, add picture-in-picture features, stabilize their videos, and a lot more. CapCut malware The official TikTok app has more than 500 million downloads on Googles Play Store, however it is developed by ByteDance, a Chinese software maker, and as such, the app is being heavily scrutinized in the West. Some countries are claiming the Chinese government might pressure ByteDance into sharing sensitive data with the authorities, thus compromising the privacy of its users. The problem escalated even further in recent weeks, when the US government banned its employees from having the app installed on government-issued mobile devices. Furthermore, countries such as Taiwan, India, and elsewhere, have also issued nationwide bans on the app. Read more > RESTRICT Act introduced in US Senate to fast-track TikTok ban > TikTok officially banned from US government smartphones > These are the best ID theft protection tools right now As a result, people are looking for alternative ways to download the app, which is where criminals come in. They created multiple malicious websites, pretending to offer the video editing app for download, but instead are deploying two malware variants: one is the Offx Stealer, and the other one is the RedLine Stealer. Offx runs on Windows 8, 10, and 11, and when installed, will display an error message to the victim, while continuing to operate in the background. RedLine Stealer is one of the worlds most popular (and infamous) infostealers, allowing threat actors to exfiltrate data stored in web browsers and applications (for example login credentials, credit card information, and similar), as well as cryptocurrency wallet data, and more. By the time Cybles report was made public, all of the discovered domains have been taken offline. However, that doesnt mean that the attackers simply wont move their infrastructure elsewhere, so its best to be on high alert, especially when downloading apps from non-official sources. Here are the best firewalls at the moment Via: BleepingComputer ====================================================================== Link to news story: https://www.techradar.com/news/this-new-malware-scam-spoofs-capcut-video-editi ng-links-but-just-infects-your-device --- Mystic BBS v1.12 A47 (Linux/64) * Origin: tqwNet Technology News (1337:1/100) .