Thousands of YouTube Videos Used to Spread Hidden Malware
A large‑scale operation on YouTube has been uncovered, where around 3,000 videos were used to trick people into downloading harmful software. These videos, active since 2021, all looked like harmless tutorials or offers—such as free game cheats or cracked versions of popular software—but they hid malware that could steal personal information. The campaign, called the “Ghost Network,” used hacked or fake accounts to upload the content, and then boosted them with likes and comments so they appeared trustworthy.
Many of these videos attracted hundreds of thousands of views by offering something enticing: “Get this cool cheat for your game!” or “Download Photoshop free!” Instead of getting what was promised, users were directed through links to sites like Google Drive or Dropbox, then encouraged to download files that carried malware that could steal passwords, crypto wallets, and other personal data. The attackers set up the process in three roles: uploaders, commenters (to make videos look real), and link‑posters. This made it hard for the platform to keep up.
Finally, Google LLC stepped in and removed most of the videos once they were discovered. The case shows how even popular and trusted platforms can be used to spread dangerous threats—and why it’s important to be careful when downloading anything from the internet, especially when it’s advertised as “free” or “too good to be true.”
