Most Popular Malware and Why It Hacks You

[@lussor1]

I hate infostealers, i miss ransomware era

[@mik3lang3lo]

The good old days ❤

[@joepjoep9531]

You can also get a combination and ransomware is not death at all but I agree with what Leo states here.

[@TheRedDraqon]

Youareanidiot looking like professional software compared to infostealers

[@ciszaiogien]

actually its good, thanks to them we have fappening websites for example

[@FairwellNoob]

This is like quitting crack for cocaine

[@joedavids5257]

Hiya just a tip on your thumbnails.. I find your videos so interesting and informative I thought I'd take the time out to give you a suggestion.. that red line at the top, often makes me think I've already watched your video. It's not just you that does it but if I wasn't paying attention I'd scroll right past you thinking that I've already seen it. Just a thought from a good intentioned subscriber

[@nexolec109]

agreed

[@nazgu1]

+1

[@Tjockpaladin]

The red line got something to do with KZbin, Even if you go incognito the video keep track of you/info. Only few people here on youtube know about that problem. So got nothing to do with the Channel it self. If we talking about the same thing..

[@dogethegamershibe]

I had no idea the malware scene had changed so much since then. Last time I checked in, ransomware and spyware was all the rage. Now it’s infostealers. Makes me paranoid that I might’ve gotten infected by one and I just haven’t noticed. Thanks for putting this out there man.

[@user-el4su7tl6f]

Im paranoid too. My bank account hasn't been drained yet so I think im good (I hope 🙏)

[@SFOSam]

I never store payment credentials on any app or website for this exact reason. I also make a point never to click on sponsored links or open any email unless I know EXACTLY what it is. I know these things don’t offer completely failsafe protection, but they will at least make it harder for the bad guys to hit you where it hurts.

[@CasualGuides]

But can u really get infected just by a single click on a website? Or email. If you have everything updated. And i mean without you downloading and or executing anything.

[@hacktrolz2176]

No, unless you're targeted by a state organization. lol

[@daddy-w6o5]

​@@CasualGuides yes, you can get hacked just by opening a malicious website or by opening a fishy email. Reason- Malicious websites have dangerous scripts which 'come to life' the moment you visit the website. The fix- Use NoScripts plugin And in emails, use ProtonMail, don't ask why, just use it. Fck convenience, we need privacy.

[@SFOSam]

It may be unlikely, but it’s still not a risk you want to take needlessly. There’s a reason why the FBI now recommends using an adblocker.

[@the-answer-is-42]

​@@CasualGuides It's possible, for example, there could be a vulnerability in the browser that can be used to run code on your computer that infects you. To my understanding, this is extremely rare, but it is possible. Things like ad blockers or NoScript can offer some additional protection.

[@BOOSTEDDUDE]

That's crazy that WannaCry is No 2 on that list you had all these years later.

[@malwaretestingfan]

Ransomware is less predominant: STOP is notably absent, so is Dharma and more traditional infostealers (e.g. Azorult, Emotet, Tiny Banker, Nanocore, Dridex), and now I'm noticing that BloomingComputer has even ceased to publish it's A Week In Ransomware series since May of this year. I notice also that the backdoors are mostly long established MaaS/RAT, which was not as pronounced even since 2021 (when most infostealers were at least new), and the return of the IoT theme. Did another extinction event happen in malware?

[@MathiasYmagnus]

TBF if they are selling your information that doesn't mean they 'hacked' it from you. IMO* and would be willing to put money on it that there are a lot of 'bad actors' out there doing this. They don't need to hack if you've already given them access.

[@sirlukas2]

Informative video as always. Crazy how times have changed so much in just the last decade

[@BNHSM]

i was a victim of racoon stealer

[@shigi_nagisa]

1:21 why is wannacry on 2nd? I thought it was pretty much outdated

[@TheRedDraqon]

That’s just how huge it was back in the day. It still gets spread in secret but much less viral than it used to be

[@thebugg333]

It's still out there, XP and Server 2003 (among others) are out in the wild still, and the extended life of Windows embedded and people being cheap or not understanding why they need to upgrade when it's still running.

[@BOOSTEDDUDE]

I was thinking the same thing. Wannacray was pretty bad and I think a router at an ISP I was on had that baked into some of their fiber optic only routers. It was pretty nasty doing DNS hijacks and stuff.

[@JorgeLopez-qj8pu]

Those monsters stole my subway points 😭😭😭

[@billyguthrie3176]

I would love to hear your rebutal to this one tech i follow. He always says that if you think you need an antivirus then you don't know what security is. He also always trys to imply that antivirues are useless.

[@floriegl]

The thing is that antivirus software is bad about protecting against new threats. When a new fishing website or a new maleware variant gets created it likely takes a few days to a week for the antivirus to have it in the database. For this a good behavioural detection is needed at which most antivirus software sucks at (see the comparison videos fron Leo). But where they shine is when you download a software which contains a virus or maybe a friend gave you an old USB Stick which has some virusus on it which they didn't know about. Of course activly thinking before entering your details somewhere or opening a random file is really important, but as long as the antivirus doesn't have an exploit its a second layer of defense. My most important strategy is not running any executable file from an unknown source before it wasn't first added to VirusTotal a week ago to give the antivirus companiss time to check if it is malicious.

[@IamLookingforWoody_________786]

Knowledgeable video.

[@Diabloisbackk]

make longer videos more details

[@MRF2492]

How tf people still infected by WannaCry?

[@brawldude2656]

Update lacking older OSes are very common

[@HR-wd6cw]

Older OSes (and hardware) that was not patched. Although I think most OSes (even Windows 10) has measures to fight against WannaCry infections. A bigger one I think was Spectre Meltdown as it targeted at firmware and the processors and less so Oses and software. My guess is that mostp eople have probably upgraded their hardware and software since these came out about 8 years ago.

[@brawldude2656]

@@HR-wd6cw why did you include windows 10 as "even" 😭😭🙏 windows 10 was released before wanna cry and was the main OS during the attack

[@captain187cloudy9]

I tried to download a virus like software, and brave was like "No" I wanted to do this for educational purposes, but I had to use Edge instead. Anyways, I couldn't run the software in VBox as it was a bootable software.

[@D.von.N]

So using Windows in a VM (any VM) is this useful? I have just installed one in my Linux for future use.

[@tomato.mp4]

I'm so scared of info stealers since they have no instant symptoms and if the hackers get into important accounts like emails they can take over basically all your accounts plus make recovery a pain I'd guess a 3 month process and a million headaches if your lucky. Also you don't even need to run the info stealer as administrator for it to get everything. Also usually undetected by anti virus

[@dee23gaming]

I recently got hacked by a session cookie info stealer, but won the fight. The best thing to do is to first make sure you keep control of your precious email address. Change the password, recovery options, and keep your backup codes ready if you're using Gmail. Next, change ALL your online accounts' passwords, but not only that, but also migrate them to a new email address. This way, you completely cut off any chance for the hacker trying new things. Once the email address has changed, the hacker has lost control. This also diverts attention away from your old email address, because now there's no value in the email address. Make sure all popular online accounts are migrated. You have to think like the hacker - at what point do you lose all control of your account? It's when the hacker successfully changed your online account's email address.

[@TheSkunkyMonk]

I miss the old days it was either for espionage or more likely just bragging rights :( worlds become so money focused :(

[@kshil9713]

When you say (2:50) that they disappear, does that mean if you've run a Lumma stealer once, that it is no longer on your device? I had one 2 weeks ago, got most of my accounts hacked and stolen, regained access to some, and then they didn't strike again. Does it mean I'm safe as long as I don't run the .exe again?

[@ivegotkidstofeed]

LOL

[@TheRedDraqon]

Sometimes but not always. If you want to have a think about it, imagine you are a hacker looking for info, obviously there will likely be a way for the infostealer to reappear and run. I suggest a clean wipe as it’s better safe than sorry. Next time when downloading a “free software” program involving stuff like ai, put it through anyrun or hatching triage. Used it to help my father avoid atomic stealer in an “OpenAI Sora” program.

[@berendberend702]

Reinstall windows from scratch please, and change all your passwords

[@d_daniel6263]

How did you get infected?

[@kshil9713]

@@berendberend702 I did this with a caveat. I don't have a USB stick so just downloaded Windows and did a fresh install that way.. also changed my all my passwords. Am I "safe" now?

[@LuggageStardate]

I thought windows was the most common malware.

[@vividthespis]

old joke

[@gorillagroddgaming]

Hilarious. Go back to red dit

[@thatzaliasguy]

#LinuxFTW

[@Kimarnic]

​@@thatzaliasguyLinux master race 2025 for sure Still 5%

[@D.von.N]

I guess protecting personal data is not really possible these days, due to countlessm eaks of any databases out there, but keeping ownership of particular accounts is still important.

[@erikhansson9388]

About creditcard in sweden we can close internet payments and international payments for the card. Only works physical in the store. Even if it was on u need to verify with your phone before purchase it calls bank id here. Just dont click on links and download shit😅 Be safe!

[@FIN-Stryk9]

That sounds so secure and I wish we had that in Finland. I just recently watched a document where common people told about their experience with scams and viruses stealing banking details and the aftermath. Over 90% of the time banks just say that if you get hacked or scammed it is your fault and the banks rarely even help you to get your money back. I think the worst that happened was that some of the hackers even made loans from the banks and the banks never called to the owner of the creditcards/banks accounts and again they never did anything for the victim. Greeting from a Finnish brother!

[@LachCrafter]

hi guys

[@scbjasjbcabj1112]

hi buddy, how's ur day today

[@nokisgp]

hey can you buy me flare plz?

[@spacesheep_]

hi youtube user LachCrafter

[@capulini]

Bye see you later

[@nokisgp]

See you later guys

[@lucarmyfool4800]

Hmmm time to go back to LINUX!!!

[@Honza1p]

And how they bypass login from new place/ip? I get email every time I login with vpn.

[@Damariobros]

Do any of the common info stealers sniff or dump the ram? If so, what would be the value of memory encryption for cookies, password managers, authenticators, etc and how effective would it be?

[@KRawatXP2003]

Just change all your password once a year to be safe.

[@gregory-j3q]

Great analysis, thank you! A bit off-topic, but I wanted to ask: My OKX wallet holds some USDT, and I have the seed phrase. (alarm fetch churn bridge exercise tape speak race clerk couch crater letter). Could you explain how to move them to Binance?

[@GTSongwriter]

Should you use windows sandbox to use Microsoft edge to broswe the internet?

[@louis-philippesavard742]

Any way to find out if there is one of those on a mac ?

[@zyhgar25]

The fact these viruses are leaking into the world of modding its scary. Sure modding as a whole is a risk in its self but man its getting a lot more riskier and riskier the more of these stealthy viruses popping up. Even with popular stuff its a risk who knows if the modders haven't snuck in a stealer that isn't detectable yet... fun.

[@CasualGuides]

I was wondering how secure modern browsers and the websurfing is, can u get infected from just clicking a link (visiting a website) without any interaction. While having newest version of browser , windows and antivirus like norton installed. Or is it only possible to get infected by a zero day in this case?

[@floriegl]

It's always possible but really really unlikely if you are not a person of interest. Why would anyone waste a million dollar 0day on random people if they could just keep it under the radar and use it for high value targets (more in regard to espionage)?

[@CasualGuides]

@ i was wondering if an infection just by visiting the website (0 interactions) is only doable with a zero day exploit these days.

[@CasualGuides]

@ and ye no one would burn a zero day on a normal person for no reason

[@floriegl]

@@CasualGuides Well, as you likely know browsers update pretty regularly. Which implies that all working exploits need to be a 0day.

[@CasualGuides]

@ so that means when surfing these days , you dont have to be scared getting infected especially when i talk about smaller shop sites blogs or anything?

[@DarkStoorM_]

AI is such a huge gold mine for info stealers nowadays

[@buzzbang9164]

sites that important for security info and learn

[@ansfridaeyowulfsdottir8095]

I will never use any "Cloud". It's just somebody else's computer. {:o:O:}

[@pedrogorilla483]

How about Linux?

[@Myster_M6039]

8 minutes

[@giovany2TheRabbit]

No bro, it's a crazy ☠

[@cpuuk]

Not far off throwing it all in the bin and going to live on a mountain 🤔

[@adriantarver2229]

Linux for the win once again. 💯

[@stephenkamenar]

install a crypto wallet onto your pc with like $50 in it, you'll know if you ever get hacked

[@mapache-ehcapam]

I'd rather kill myself than become crypto bro

[@CD3WD-Project]

I got a hack for you and you and you everybody gets a hack

[@JeffBourke]

“Popular” 😂

[@kunzpeter433]

Run your OS in a VM, create a restore point when it's perfect, and restore it weekly to avoid any issues with infections.

[@thatzaliasguy]

Restore points don't un-do rootkits lmfao. Just stop using Windows, and stop downloading dumb shit.

[@cardaib9022]

@@thatzaliasguy never stop using windows 👍

[@maxwellsmart3156]

Didn't you mean to say VM snapshot and revert after every session. Doing it weekly seems lazy and belies smart security practices. This way you'll always be using the fastest Windows install. The VM snapshot facility also doesn't tie you to Windows, the exploit fly paper.

[@kunzpeter433]

​@@maxwellsmart3156 Thank you for this comment. Sure, you should run Windows inside your Linux Host.

[@kunzpeter433]

@@thatzaliasguy Using your Windows VM inside a Linux Host.

[@HenriRothlin]

I installed a fortnite skin swapper like 3 months ago two or three days later i get emails with 2fa codes and stuff, ca. 2 weeks later i get an email to all my email Accounts telling me my passwords turns out i installed a rat. Also after that i did a clean windows reinstall. Also great vid

[@eternalwarrior7060]

🎖🎖🎖🎖🎖🎖🎖

[@RussGreeno]

If I was going to setup a family member, would certainly get them a chromebook with some security extensions and a security dns such as q9 or next.

[@gabrielkorytiak]

Linux user watching this will be like : Nyah im not affected :)

[@MTGeomancer]

The world's severs run Linux and get hacked every single day. I've no idea why people cling to the belief Linux is immune, but I'm sure hackers love it because it makes them easy targets lol.

[@ivopo-l6d]

(joke dont take it seriously) Linux users be like 🗿🗿