Cybercriminals are using short-form video platforms to spread malware, specifically infostealers, by luring users with promises of free services like Spotify Premium, Windows activation, and Microsoft Office. These campaigns, uncovered by researchers at ReversingLabs, utilize slick social media videos to trick users into installing malware on their Windows devices1. The attackers have shifted from traditional phishing emails to more deceptive tactics, taking advantage of users' desire for free premium services. The infostealers compromised devices, allowing cybercriminals to steal sensitive information. This new tactic highlights the evolving nature of cyber threats, as attackers adapt to user behavior and exploit popular social media platforms. So what matters to practitioners is that these campaigns can bypass traditional security measures, making it essential to educate users about the risks of engaging with suspicious social media content.