New YouTube Bot Malware Steals User Info

**YouTube bot malware analysis:** This technical report describes a .NET-based YouTube bot that automates views/likes/comments using Microsoft.Playwright, persists as AvastSecurity.exe in %appdata% with a scheduled task, performs anti-VM and process-mutex checks, harvests browser cookies/autofill/login data from Chromium-based browsers, and connects to a C&C server that issues commands (view/stopView/getLog/downloadAndRun/selfDestruct) and can fetch dependencies and additional payloads.