Hackers use names of Grammy nominees to spread malware

Cybercriminals are actively abusing the names of artists and songs nominated for a Grammy 2020 award, in order to spread malware. Analysis of the nominated artists by Kaspersky showed that the names of Ariana Grande, Taylor Swift and Post Malone were used most to disguise malicious files, with over half (55%) of detected malicious files named after them.

The connection between the rise in popularity and malicious activity is very evident in the case of newer artists such as Billie Eilish. The teenage singer became hugely popular in 2019, and the number of users who downloaded malicious files with her name has risen almost tenfold compared to 2018 – from 254 to 2171, the number of unique distributed malicious files – from 221 to 1,556.

For instance, while the number of users attacked by Malware disguised as Billie Eilish songs in Nigeria accounted for only 381 in 2018, 2019 saw this number increase to 9,722. Overall, Nigeria saw 55 of such malicious files distributed in this region in 2019, with 94,630 attacks.

STEPS TO REDUCE THE RISK OF INFECTION:

1. If you want to listen or download famous artists' songs, use reputable services like Apple Music, Spotify Premium, and Amazon Music. Or try to find a recognised free music site that allows you to download songs legally.

2. Try to avoid suspicious links, promising exclusive music content. Check musicians’ official social media accounts or read reputable music blogs like Pitchfork, to make sure that such content exists.

3. Look at the downloaded file extension. Even if you are going to download an audio or video file from a source you consider trusted and legitimate, the file should have an mp3, .avi, .mkv or .mp4 extension among other music and video formats, definitely not .exe or .lnk.

4. Use a reliable security solution, for comprehensive protection from a wide range of threats.

source: APO