Beware! After WhatsApp, Google Play Store, hackers using YouTube malware to trap users; meet PennyWise

tech.hindustantimes.com:

After multiple cases of malware fraud were discovered on WhatsApp and Google Play Store, new ones have popped up on YouTube. These steal passwords, Telegram messages, and even take screenshots. So, if you are scrolling your way through YouTube videos, then beware! Some of these videos can end up hacking your device! This is because hackers are using YouTube as a carrier to spread new stealer malware dubbed PennyWise to learn all possible information about you. New malware PennyWise has been discovered by cyber researchers of the Cyble Research Labs, who uncovered more than 80 videos on YouTube that have the potential to leave you in danger. The malware focuses on stealing sensitive browser data and cryptocurrency wallets from the victim’s device.

Cybersecurity researchers have found these videos with only a few views belonging to the same YouTube account. Most of these videos illustrate how a piece of bitcoin mining software operates, in an attempt to make users download the software with a shared downloadable link in the description of the video. To make it more legitimate, the file comes with a password-protection and a link to VirusTotal, which confirms the file as “clean” and safe to proceed with. Shockingly, it also shows a warning that some antivirus programs may trigger a false positive alert.

Once a user downloads this file, it ends up planting the PennyWise malware in the system. According to cybersecurity experts, malware is capable of stealing almost all kinds of data! The Pennywise malware can obtain the path for several different browsers it targets including more than 30 Chrome-based browsers, 5 Mozilla-based browsers, Opera, and Microsoft Edge.

This malware is capable of stealing information from system