Figure 2 – AntiVM checkĪfter the check, the malware searches for running processes with a mutex name of “sm” and terminates them using the “taskkill” command by calling the DeleteProcessesByMutexName() method.

Otherwise, it will proceed to perform the tasks specified in the argument strings. If the malware determines that it is running in a controlled environment, it will not execute further. This check is designed to prevent the malware from being detected and analyzed in a virtual environment. When the malware is executed, it first checks whether it is running in a controlled environment, such as VMware or VirtualBox, using the DetectVM() function. Comment – Leave comments for the YouTube video.Video Duration – Duration of the video to view.Video ID – Unique ID of a YouTube video.Figure 1 – Static file detailsįour argument strings are required to run the malware executable, including the video ID, video duration, like, and comment. NET compiler, as shown in the figure below. It is a 32-bit executable file compiled with. Moreover, it can steal sensitive information from browsers and act as a bot that receives commands from the Command and Control (C&C) server for other malicious activities. Recently, CRIL spotted a new YouTube bot malware that can perform activities such as viewing, liking, and commenting on YouTube videos. These bots are software programs that can automate tasks on the YouTube platform, such as viewing, liking, or disliking videos, subscribing, or unsubscribing to channels, leaving comments, and adding videos to playlists, etc.Ĭyble Research and Intelligence Labs (CRIL) has been keeping track of new and active malware families in the wild. However, this approach is generally considered unfair and may be against the YouTube platform’s terms of service.Īs YouTube becomes more popular, the use of YouTube bots is also enhancing. As a result, some may turn to using YouTube bots to artificially boost their rankings on the YouTube platform, which can help them reach a wider audience through organic views. However, YouTube content creators need help to gain a maximum number of views, likes, comments, and subscribers for their videos and channels. It also has a high potential for making good revenue. YouTube is one of the great platforms for many content creators. Uncovering the C&C Communication Capabilities of Malicious YouTube Bot

View bots youtube