"New S1deload Malware Hijacking Users' Social Media Accounts and Mining Cryptocurrency"

An active malware campaign has been targeting Facebook and YouTube users through a new information stealer aimed at taking over accounts and exploiting system resources for cryptocurrency mining. Bitdefender dubbed the malware S1deload Stealer due to its use of DLL side-loading techniques to bypass security measures and execute its malicious components. Once infected, S1deload Stealer steals user credentials, mimics human behavior to artificially boost videos and other content engagement, evaluates the value of individual accounts, mines for BEAM cryptocurrency, and distributes the malicious link to the user's followers. The ultimate goal of the campaign is to seize control of users' Facebook and YouTube accounts and rent out access to increase the number of views and likes for shared videos and posts. It is suspected that more than 600 unique users were affected during the six-month period between July and December 2022. Most infections have been found in Canada, Romania, Turkey, France, Bangladesh, Mexico, and Peru. This article continues to discuss findings regarding the S1deload Stealer malware campaign. 

THN reports "New S1deload Malware Hijacking Users' Social Media Accounts and Mining Cryptocurrency"