Free Spotify Premium hacks on social media are spreading infostealers

Short-form video platforms (TikTok and Instagram Reels) are being abused to deliver the Vidar infostealer: attackers post polished tutorial-style videos that instruct victims to execute PowerShell commands or visit malicious download sites to obtain cracked/free software, which installs infostealer malware that exfiltrates browser credentials, cookies, crypto wallets, 2FA data and more. The report highlights that these campaigns evade detection by adding Defender exclusions and recommends sourcing software from official vendors, avoiding executing untrusted commands, and using up-to-date anti-malware solutions.