Storm Watch | Cyber Podcast | TikTok Malware, Exploit Scoring Wars & Real-World Attacks

Summary: Attackers are distributing malware through TikTok using AI-generated videos disguised as software activation tutorials that instruct users to run malicious PowerShell commands, a technique called ClickFix that has drawn nearly half a million views. The malware, including Vidar and StealC, runs entirely in memory to bypass traditional security tools and targets credentials, wallets, and financial data, with state-sponsored groups from Iran, North Korea, and Russia adopting these tactics.
Why it matters: Nearly half a million views on tutorials that walk employees through running PowerShell commands means the delivery channel is a consumer video feed, not email, and the payload runs in memory where conventional tooling does not see it.

Read the original at GreyNoise Blog ↗