Scammers Use TikTok and Instagram Reels to Spread Vidar Infostealer

**Executive Summary:** ReversingLabs identified campaigns on TikTok and Instagram Reels that use professional-looking tutorial videos and social-engineering prompts to trick users into executing PowerShell commands or visiting fake download sites, which drop a build.exe payload containing the Vidar infostealer; the attacks leverage platform recommendation algorithms to scale and have measurable engagement (e.g., 109k views, 1,699 saves).