Cybersecurity firm Kaspersky has disclosed a new malware scheme involving blackmailing YouTube influencers. Hackers are exploiting YouTube's copyright strike system to coerce creators into including malicious links in their video descriptions, leading to malware-infected downloads for viewers.

Known as SilentCryptoMiner, the malware campaign leverages the trust influencers have built with their audiences. Disguised as tools for bypassing digital restrictions, the malware mines cryptocurrencies like Ethereum and Monero. The campaign has been particularly effective due to the exploitation of copyright complaints as a means to blackmail YouTubers.

Over the last six months, Kaspersky has detected over 2.4 million instances of network manipulation by these cybercriminals. They use tools disguised as legitimate software solutions to deploy malicious payloads. Once installed, the malware bypasses security measures and alters critical system files on victims' systems.

An example highlighted by Kaspersky involves a YouTuber with 60,000 subscribers who unknowingly distributed the malware. Initially, the influencer shared a tool link that was, in fact, infected with SilentCryptoMiner. After discovering the issue, the content creator removed the link and issued a warning to viewers.

The report also warns of cybercriminals filing false copyright claims to force compliance from non-cooperative YouTubers. These malicious actors could soon extend blackmail tactics to other social media platforms such as Telegram, targeting influencers and their communities.

Kaspersky's revelation follows the exposure of another significant cybersecurity threat involving a Trojan called SparkCat, which steals sensitive data like cryptocurrency wallet recovery phrases from app stores. This incident underscores the growing risks faced by cryptocurrency investors and the influence of social media endorsements in the crypto world.