REPORT THIS ACCOUNT
Source: YouTube · John Hammond · published Feb 14, 2025 · 25:48
The TikTok account "shell Shield" is distributing malware disguised as cracked software for popular applications like ChatGPT, Office 365, and Adobe products 0:14-0:32.
Key Takeaways:
• The scam tricks users into running malicious PowerShell commands that download and execute malware via Windows Run dialog 0:40-1:01
• The malware creates hidden folders, disables antivirus protections, and downloads additional malicious components 4:14-5:15
• Analysis reveals the malware is Vidar info stealer, which steals passwords, browser data, credentials, and other sensitive information 16:04-17:36
• The stolen information is exfiltrated to attacker-controlled servers via Telegram and other channels 18:40-19:19
Never execute unknown PowerShell commands or download cracked software from untrusted sources, as they almost always contain malware designed to steal your personal information 24:35-24:43.
Sources:
- 0:14-0:32 Introduction to the TikTok scam distributing fake cracked software
- 0:40-1:01 Explanation of how the malicious PowerShell commands work
- 4:14-5:15 Technical breakdown of malware installation and execution
- 16:04-17:36 Identification of Vidar info stealer and its data theft capabilities
- 18:40-19:19 Analysis of data exfiltration to attacker-controlled servers
- 24:35-24:43 Final warning against executing unknown PowerShell
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Malware Analysis. Commonly maps to: Security Operations, Security Architecture and Engineering. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
to get chat GPT pro client with new O3 model on Windows press Windows button plus r type Powershell and run it in the Powershell window type this command and press enter wait a few moments for the installation process to complete well that's got to be malware this Tik Tok account called the shell Shield has repeatedly been posting videos and clips to install cracked software for things like chat GPT Office 365 cap cut Adobe Premiere Photoshop and all these different things but they're all lies and these videos have like thousands of views some of them have over a 100,000 views what they're telling you to do when you press the Windows key and r on your keyboard to open up the Run dialogue box lets you run a command like Powershell and you open up and you enter iwr that's an alias for invoke…