Vidar Stealer Distributed via Fake Software Tutorials on TikTok and Instagram (infosecurity-magazine.com)

• Fake Microsoft accounts spread Vidar via PowerShell script
• Videos with 100k+ views; algorithms manipulated via saves/shares
• Second campaign uses Spotify bait and survey-gated links

"Threat actors are using short-form videos on TikTok and Instagram Reels to distribute the Vidar infostealer, disguised as free software tutorials. One campaign uses AI-voiced videos showing PowerShell commands to download Vidar from a lookalike domain (msget[.]run). Another campaign baits users with free Spotify Premium and directs them to survey-gated sites. ReversingLabs analysis highlights the abuse of platform algorithms to maximize reach."