Technology
3,000+ YouTube videos deliver malware disguised as free software
NEWYou can now listen to Fox News articles!
YouTube is arguably the most popular and most visited platform for entertainment, education and tutorials. There’s a video for everything on YouTube, whether you want to learn how to cook, ride a bike or need help with work or school. But recent research by Check Point reveals a darker side: a sprawling malware distribution network quietly operating within the platform. Hackers are using compromised accounts, fake engagement and clever social engineering to spread information-stealing malware disguised in more than 3,000 software cracks and game hack videos.
Most victims begin by searching for free or cracked software, cheat tools or game hacks, which is the root of the infection chain. This curiosity for “free” software opens the door to the Ghost Network’s traps.
META ACCOUNT SUSPENSION SCAM HIDES FILEFIX MALWARE
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CyberGuy.com newsletter.
Cybercriminals are exploiting YouTube’s massive reach by disguising malware inside fake “how-to” and “free software” videos. (Kurt “CyberGuy” Knutsson)
All about YouTube’s ghost network
According to Check Point Research, the YouTube Ghost Network has been active since 2021, with activity surging threefold in 2025. It’s built around a simple but effective formula, which blends social manipulation with technical stealth. The network’s primary targets are people searching for “Game Hacks/Cheats” and “Software Cracks/Piracy.”
Researchers discovered that these videos often feature positive comments, likes and community posts from compromised or fake accounts. This coordinated engagement gives potential victims a false sense of safety.
The fake social proof and fabricated likes, comments and subscriber activity play a key psychological role. They trick viewers into believing the content is legitimate and widely trusted, allowing the operation to persist even when YouTube removes individual videos or channels. The network’s modular structure and constant replacement of banned accounts make takedowns only temporarily effective.
Once a user clicks the provided links, they’re usually taken to file-sharing services or phishing sites hosted on Google Sites, MediaFire, Dropbox or similar platforms. The linked files are often password-protected archives, making them harder for antivirus tools to scan. Victims are then asked to disable Windows Defender before installation, effectively disarming their own protection before running the malware.
Check Point found that the majority of these attacks deliver information-stealing malware such as Lumma Stealer, Rhadamanthys, StealC and RedLine. These programs harvest passwords, browser data and other sensitive information, sending it back to the attacker’s command and control servers.
What makes the network particularly resilient is its role-based structure. Each compromised YouTube account serves a function; some upload malicious videos, others post download links and a third group boosts credibility by commenting and liking content. When an account gets banned, it’s quickly replaced, allowing the operation to continue largely uninterrupted.
A single click on a malicious link can disable your defenses and install information-stealing malware in seconds. (Kurt “CyberGuy” Knutsson)
Inside the malicious campaigns
Two major campaigns stood out in Check Point’s investigation. The first involved the Rhadamanthys infostealer, spread through a compromised YouTube channel named @Sound_Writer, which had nearly 10,000 subscribers.
The attackers uploaded fake cryptocurrency-related videos and used phishing pages on Google Sites to distribute malicious archives. These pages instructed viewers to “turn off Windows Defender temporarily,” assuring them it was a false alert. The archives contained executable files that quietly installed the Rhadamanthys malware, which connected to multiple control servers to exfiltrate stolen data.
The second campaign, involving HijackLoader and Rhadamanthys, leveraged a much larger channel, @Afonesio1, with around 129,000 subscribers. Here, attackers uploaded videos offering cracked versions of Adobe Photoshop, Premiere Pro, and FL Studio.
MICROSOFT SOUNDS ALARM AS HACKERS TURN TEAMS PLATFORM INTO ‘REAL-WORLD DANGERS’ FOR USERS
One of these videos gained over 291,000 views and dozens of glowing comments claiming the software worked perfectly. The malware was hidden inside a password-protected archive linked through a community post. The installer used HijackLoader to drop the Rhadamanthys payload, which then connected to rotating control servers every few days to avoid detection.
Even if you never complete the installation, you can still be at risk. Simply visiting the phishing or file-hosting sites may expose you to malicious scripts or credential theft prompts disguised as “verification” steps. Clicking the wrong link can compromise login data before any software is even installed.
Strong passwords, two-factor authentication, and regular security scans are your best defense against YouTube’s Ghost Network. (Cyberguy.com)
7 steps you can take to stay safe from YouTube’s ghost network
The Ghost Network succeeds by exploiting curiosity and trust. It disguises malware as “free software” or “game hacks,” relying on users to click before thinking. Protecting yourself means adopting habits that make it harder for attackers to fool you. Here are seven steps to stay safe:
1) Avoid cracked software and cheat downloads
Most infections start with people trying to download pirated or modified programs. These files are often hosted on unregulated file-sharing websites where anyone can upload malicious content. Even if a YouTube video looks polished or filled with positive comments, that doesn’t mean it’s safe. Official software developers and gaming studios never distribute downloads through YouTube links or third-party sites.
Besides being dangerous, downloading cracked software also poses legal risks. Piracy violates copyright law and can lead to serious consequences, while giving cybercriminals a perfect delivery channel for malware.
2) Use a strong antivirus
Make sure you have a trusted antivirus solution installed and always running. Real-time protection can detect suspicious downloads and block harmful files before they do any damage. Schedule regular system scans and keep your antivirus updated so it can recognize the latest threats.
The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have strong antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe.
Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com
WHAT REALLY HAPPENS ON THE DARK WEB, AND HOW TO STAY SAFE
3) Never disable your antivirus or Windows Defender
If a tutorial or installer tells you to disable your security software, that’s a red flag. Malware creators use this trick to bypass detection. There’s no legitimate reason to turn off protection, even temporarily. The moment a file asks you to do so, delete it immediately.
4) Be cautious with YouTube links and download sources
Always inspect links before clicking. Hover over them to check the destination and avoid shortened or redirected URLs that hide their true target. Downloads hosted on unfamiliar domains or file-sharing sites should be treated as unsafe. If you need software, get it directly from the official website or trusted open-source communities.
5) Use a password manager and enable two-factor authentication (2FA)
Turning on 2FA for important accounts adds another layer of protection, ensuring that even if someone gets your password, they can’t access your account. Malware often aims to steal saved passwords and browser data. Storing credentials in a password manager keeps them encrypted and separate from your browser, making them harder to steal. Consider using a password manager, which securely stores and generates complex passwords, reducing the risk of password reuse.
Next, see if your email has been exposed in past breaches. Our #1 password manager (see CyberGuy.com) pick includes a built-in breach scanner that checks whether your email address or passwords have appeared in known leaks. If you discover a match, immediately change any reused passwords and secure those accounts with new, unique credentials.
Check out the best expert-reviewed password managers of 2025 at CyberGuy.com
6) Keep your operating system and apps updated
Software updates don’t just bring new features, but they also fix security flaws that malware can exploit. Enable automatic updates for your system, browser, and commonly used applications. Staying up to date is one of the simplest ways to prevent infections.
7) Use a trusted data removal service
Even after securing your system, your personal information might already be circulating online from past breaches. A reliable data removal service can continuously scan and request deletion of your data from people-search and broker sites, making it harder for cybercriminals to exploit your exposed information.
While no service can guarantee the complete removal of your data from the internet, a data removal service is really a smart choice. They aren’t cheap, and neither is your privacy. These services do all the work for you by actively monitoring and systematically erasing your personal information from hundreds of websites. It’s what gives me peace of mind and has proven to be the most effective way to erase your personal data from the internet. By limiting the information available, you reduce the risk of scammers cross-referencing data from breaches with information they might find on the dark web, making it harder for them to target you.
Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting CyberGuy.com
Get a free scan to find out if your personal information is already out on the web: CyberGuy.com
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Kurt’s key takeaway
Cybercriminals have evolved beyond traditional phishing and email scams. By exploiting a platform built on trust and engagement, they have created a scalable, self-sustaining system for malware distribution. Frequent file updates, password-protected payloads, and shifting control servers make these campaigns difficult for both YouTube and security vendors to detect and shut down.
Do you think YouTube is doing enough to stop malware distribution on its platform? Let us know by writing to us at CyberGuy.com
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CyberGuy.com newsletter.
Copyright 2025 CyberGuy.com. All rights reserved.
Technology
Backrooms is a certified blockbuster with a $38 million opening day
The Kane Parsons’ film Backrooms is expected to earn up to $90 million in its opening weekend after pulling down $38 million on Friday alone. That’s not only above expectations, but absolutely obliterates A24’s previous opening weekend record of $25.5 million for Alex Garland’s Civil War. It’s also a better opening day than The Mandalorian and Grogu, which only pulled down $33.7 million on its way to a total $81.6 million for the weekend.
That also means that Backrooms is an incredibly profitable movie, with an estimated $10 million budget. By comparison, the latest Star Wars disappointment cost $165 million and was considered affordable compared to other entries in the series.
While Backrooms hasn’t received quite as much universal praise as fellow low-budget horror breakout Obsession, it’s still largely getting positive reviews. It also adds to the growing number of YouTube creators (including Obsession’s Curry Barker) who have proven to be successful box office draws.
Technology
Cab-less electric trucks hit Ohio roads
NEWYou can now listen to Fox News articles!
A freight truck with no driver, no cab and no one sitting behind the wheel is starting to sound more familiar. In fact, this summer, that is exactly what is happening on local roads in Marysville, Ohio.
EASE Logistics, an Ohio-based logistics company, is partnering with autonomous truck technology company Einride to deploy two cab-less electric trucks between EASE warehouse locations. The two companies recently announced the proof-of-concept service.
The trucks will operate on EASE property and local public roads. They will move goods between warehouse locations while the companies collect data on warehousing, distribution and transportation operations.
The project is part of the Ohio Department of Transportation’s DriveOhio Truck Automation Corridor Project, in partnership with the Indiana Department of Transportation. The goal is to study how autonomous trucking affects operations, safety and freight efficiency.
Sign up for my FREE CyberGuy Report
- Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
- For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
AI TRUCK SYSTEM MATCHES TOP HUMAN DRIVERS IN MASSIVE SAFETY SHOWDOWN WITH PERFECT SCORES
Autonomous cab-less electric trucks are beginning real-world freight testing this summer on local roads in Marysville, Ohio, as EASE Logistics and Einride launch a new pilot program. (Kurt “CyberGuy” Knutsson)
What are cab-less electric trucks?
These are not regular trucks with a driver waiting to take over. Einride’s vehicles are electric, autonomous and cab-less. That means there is no traditional driver’s seat, steering wheel area or cab built for a human operator.
The trucks use SAE Level 4 autonomous technology. In other words, the vehicle can drive itself under specific approved conditions without a human driver inside.
However, the trucks will still have human oversight. A remote operator will monitor them from off-site and can intervene when needed. The companies say that setup helps keep operations running safely and smoothly during the test.
Where will the autonomous trucks operate?
The trucks will move freight between EASE Logistics warehouses in Marysville, Ohio. They will operate during the summer of 2026 on private property and local public roads.
That detail makes a difference because many autonomous vehicle tests happen in controlled settings. This project moves closer to normal freight work. These trucks will operate inside daily logistics
EASE says the deployment will generate data on how autonomous trucks affect warehouse movement, distribution timing and transportation operations. The companies want to see how this technology performs in the real world, where freight schedules and traffic conditions rarely behave perfectly.
THE ROAD TO PROSPERITY WILL BE PAVED BY AUTONOMOUS TRUCKING
EASE Logistics and Einride will operate driverless electric freight trucks between Ohio warehouse locations while collecting data on safety, efficiency and logistics operations. (Kurt “CyberGuy” Knutsson)
Why Ohio is testing cab-less electric trucks
Ohio has become an active testing ground for truck automation. This deployment extends the Ohio Department of Transportation and DriveOhio’s Truck Automation Corridor Project, in partnership with the Indiana Department of Transportation. The project is designed to evaluate how autonomous technology affects operations, safety and freight efficiency.
EASE President and CEO Peter Coratola, Jr., said, “EASE is proud to continue advancing the Truck Automation Corridor Project alongside DriveOhio and innovative partners like Einride.” He added, “Deployments like this help move autonomous trucking from controlled pilots into daily freight operations, where safety, reliability, and efficiency can be evaluated at scale.”
This also marks EASE Logistics’ third autonomous trucking deployment with DriveOhio. That puts the company among a small group of logistics providers testing multiple autonomous freight platforms in live operations.
How safe are cab-less electric trucks?
When people hear “driverless truck,” their first thought may not be efficiency. It may be, “What happens if something goes wrong?”
That reaction is fair. These vehicles are large, heavy and operate near the public. So safety will shape how people judge this project.
Einride CEO Roozbeh Charli said, “Deploying these autonomous trucks in daily logistics operations with EASE reflects years of rigorous development and real-world validation.” He added, “Safety is not a feature we add to our technology; it is the foundation everything is built on.”
The companies also say a remote operator monitors the trucks off-site and can intervene if needed. That detail helps, but the public will still want clear answers about routes, oversight, emergency response and how remote operators step in. Those answers will become more important as autonomous trucks leave closed test areas and enter everyday traffic.
Why companies want driverless freight
For logistics companies, the appeal is easy to understand. Electric autonomous trucks could help move freight with fewer emissions, more predictable scheduling and tighter warehouse coordination.
Short warehouse-to-warehouse routes also make sense for early autonomous deployments. The route is limited. The operation is easier to study. The company can collect useful data without starting with long-haul trucking across several states.
Still, the rollout will need to prove itself. Trucks must handle traffic, road conditions, pedestrians and unexpected behavior from human drivers. Those moments will test whether autonomous freight can deliver on its promise.
The future of autonomous trucking
Autonomous trucking has moved from bold promise to real-world testing. Yet the industry still has to earn public confidence.
This Ohio deployment gives EASE, Einride and transportation officials a chance to gather useful data. It also gives the public a closer look at what driverless freight looks like.
The cab-less design may be the most striking part. Removing the cab signals a bigger shift. These trucks are built around the idea that the vehicle, software and remote operations team can handle the job.
That marks a major change in how freight has worked for generations.
TESLA BUILDS A CAR WITH NO STEERING WHEEL. NOW WHAT?
Ohio officials are expanding autonomous freight testing with cab-less electric trucks operating on public roads under remote human supervision this summer. (Kurt “CyberGuy” Knutsson)
What this means to you
You may not live near Marysville, Ohio. Still, this test matters because it shows where freight transportation is heading.
If the project works well, more companies could look at autonomous trucks for warehouse-to-warehouse routes. That could change how goods move before they ever reach store shelves or your front door.
It could also raise new questions for workers. Logistics companies may need more people who can monitor, maintain and manage autonomous systems. At the same time, drivers and warehouse workers will want honest answers about how these trucks could affect jobs over time.
For consumers, the biggest issue may be trust. People will want proof that these vehicles can operate safely around regular traffic. They will also want transparency when something goes wrong.
Join CyberGuy Live: Lock Down Your Phone in 30 Minutes (Saturday, June 13, 10 am ET)
Your phone holds your email, passwords, photos, banking apps and personal data. In this free, live online class, Kurt the CyberGuy will walk you step by step through simple phone security fixes you can do in real time. You’ll learn how to improve your privacy settings, spot the latest phone scams, use trusted security tools and walk away with a simple checklist to stay protected. Register here: CyberGuyLive.com
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Kurt’s key takeaways
Cab-less electric trucks on Ohio roads may sound alarming at first. But this project shows how quickly autonomous freight is moving into real logistics work. The EASE and Einride deployment still has plenty to prove. Safety, public trust, worker impact and day-to-day reliability will all matter. However, this summer’s test could give the trucking industry a clearer look at what comes next. Driverless freight may start with short warehouse routes. Over time, it could reshape how goods move across the country.
Would you feel comfortable sharing the road with a cab-less electric truck if no driver was inside, but a remote operator was watching from miles away? Let us know by writing to us at CyberGuy.com.
Sign up for my FREE CyberGuy Report
- Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
- For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
- Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
Copyright 2026 CyberGuy.com. All rights reserved.
Technology
Nvidia, Microsoft, and Arm are all teasing Nvidia’s new N1X laptop processors
It’s the world’s worst kept secret that Nvidia is about to announce its own Arm-powered laptop chips at Computex this weekend, and now Microsoft, Nvidia, and Arm are all openly teasing the announcement. The Windows and Nvidia GeForce accounts on X both posted “A new era of PC” earlier today, and now Arm has followed up with an identical post.
All three posts include coordinates pointing to where Computex is hosted in Taipei. Nvidia is holding a Computex keynote in Taipei at 8PM PT / 11PM ET on Sunday night, where it’s rumored to be announcing its new N1 and N1x laptop chips.
These Arm-powered Nvidia processors have been long-rumored, with reports earlier this year suggesting that both Lenovo and Dell have been preparing new laptops with the N1X chips. We first heard rumors about Nvidia’s laptop processors in 2023, and Dell CEO Michael Dell hinted at the possibility of an AI PC with Nvidia during an interview in 2024.
Nvidia’s entry into Windows on Arm will mean Qualcomm will no longer have an exclusive license for Microsoft’s Windows 11 Arm variant of its operating system. That’s good news for laptop competition, even if Qualcomm is trying to keep entry-level laptops affordable with its new Snapdragon C platform.
-
New Jersey1 minute agoDueling protests face off at New Jersey ICE detention center over detainee conditions
-
New Mexico9 minutes agoSunny and warm weekend ahead for New Mexico
-
North Carolina11 minutes agoCarolina Lands Alexandros Samodurov; Greek Big Man Completes UNC Frontcourt
-
North Dakota16 minutes agoBankruptcies for North Dakota and western Minnesota May 30, 2026
-
Ohio24 minutes agoOhio woman broke into ex’s home while he was sleeping, started shooting: police
-
Oklahoma26 minutes agoH-E-B hooks up eight Spurs Jackals superfans with tickets to Game 7 in Oklahoma City!
-
Oregon32 minutes agoCruise ship rescues stranded mariner off Oregon coast
-
Pennsylvania39 minutes agoMan accused of using excavator to destroy home with family inside