How Cybercriminals Weaponize Social Media

This report overviews social-media–facilitated cybercrime, detailing how threat actors exploit platforms to conduct scams, sell 2FA bypass tools and botnets, perform credential-stuffing and brute-force attacks, distribute malware (including RATs hidden in video content), impersonate victims for fraud, and advertise carding and other illicit services; it draws on examples from Russian-language cybercriminal forums and emphasizes continued risk during the COVID-19 pandemic.