Threat Actors Abuse AI-Generated Youtube Videos to Spread Stealer Malware

CloudSEK observed a sharp, ongoing increase in YouTube-based distribution of info-stealer malware (Vidar, RedLine, Raccoon) using tactics such as account takeover, automated uploads and comments, SEO-optimized tags, obfuscated download links, file-hosting services, and recently AI-generated presenter videos to improve trust and scale. The report outlines the infostealer ecosystem (developers and "traffers"), the limitations of string-based detection, and recommends real-time adaptive threat monitoring, user awareness, and enforcing multi-factor authentication to mitigate risk.