On May 29th, it became known that fraudsters are posting videos on YouTube, offering a tool for generating Bitcoins, which contains a Trojan, – Bleeping Computer.
"YouTube cryptocurrency videos pushing info-stealing Trojan" – site's Twitter.
Hacker video with Qulab Trojan
According to the Bleeping Computer computer help site, a hacker video advertises a tool for free generating of Bitcoins. Frost security researcher has reported these malicious videos on YouTube. But every time one video is deleted, scammers create another video containing the same fraudulent links.
Interesting in the section: "Hyip" in the world of cryptocurrencies
In all videos, the link to download the tool is listed in the description along with another link "https://freebitco.in", which basically contains similar content. After downloading, users are prompted to run the Setup.exe file containing the Qulab Trojan, which immediately infects the device. Qulab can then steal browser history, saved browser credentials, browser cookies, saved FileZilla credentials, Discord credentials, and Steam credentials from infected computers.
A video that carries the malicious Qulab Trojan has appeared on the network. Further analysis shows that the Qulab Trojan supports various types of crypto-addresses for the clipboard hijacker function.
Editor: Yulia Krasnaya