Phishing Attacks Leverage TikTok, Instagram Reels

### Executive Summary Short-form social media videos are being abused in two primary campaign styles—professional-looking tutorials and casual "flex" posts—to funnel viewers to malicious websites offering supposedly free premium software; researchers confirmed at least one delivered payload as Vidar infostealer and documented hashes, domains, and account IOCs, described the attackers' engagement-driven TTPs, and provided defensive recommendations including permissions audits and user training.