Crypto Clipper Campaign Abuses Fake Reviews, AI Narrators, and VirusTotal Comments
According to new research from Check Point Research, an unidentified threat actor has been seen using sponsored or promoted postings on reputable news websites to generate buzz for their warez.
Along with a YouTube channel, a group of accounts that participate in coordinated activity on VirusTotal with the goal of misclassifying malicious files as safe, and a dedicated WordPress phishing page that serves as the central hub, the threat actor also has access to GitHub and SourceForge projects that are promoted by phony accounts.
According to a report shared with The Hacker News by Check Point, a single threat actor used the same strategy used by reputable brands to generate buzz to promote a malicious "tool": inflated download counts, coordinated five-star reviews, influencer-style tu...