Fake Software Tutorials on TikTok Spread Vidar Stealer

ReversingLabs analyzed two active social-media campaigns that abused TikTok and Instagram Reels to distribute the Vidar infostealer and other unknown payloads by social-engineering users into running PowerShell commands or following comment-driven links to scam sites; one campaign used lookalike domains (e.g., msget.run) and algorithm-targeting accounts while another used comment-bait and survey-gated downloads (e.g., d4ug.site), with videos achieving wide reach and engagement.