A Fake Copyright Warning Campaign is in Wild For Stealing Credentials and Spreading Malware

[Chewy_fox]

A new campaign following an old method in the wild, where scammers are luring vulnerable Twitter users and blog/news site owners into sharing their credentials and downloading trojans. The theme they have taken is the Fake Copyright Warnings, which can trigger panic users to quickly react to their scheme without verifying the claim. A diligent scanning before reacting to such emails and messages is advised.

Fake Copyright Warnings Campaign

Scammers exploiting the general fear of users isn’t new, and they do it always in various means. The latest one comes in the form of a fake copyright infringement warning, which states the target’s tweet has infringing content shared and should be responded with a feedback form filled to solve the issue.

This was spotted by a journalist named Shayan Sardarizadeh, who shared a sample of such campaign’s fake warning ;

“Copyright infringement was detected in one of the tweets on your account. If you think copyright infringement is wrong, you need to provide feedback. Otherwise, your account will be suspended within 48 hours.”

While this comes from an impersonating Twitter Support account, analyzing the message carefully could avoid falling prey to this trap. The aim here is to steal the credentials when login details are logged into the phishing feedback form. Another similar campaign is targeted at news and blog owners, where scammers here state as below;

“My name is Tania.

Your website or a website that your company hosts is infringing on a copyright-protected images owned by myself.

Take a look at this document with the links to my images you used at www.randomsite.com and my earlier publications to get the evidence of my copyrights.

Download it right now and check this out for yourself:

—- scammy https://sites.google.com/view/XXX link —-

I believe you have willfully infringed my rights under 17 U.S.C. Section 101 et seq. and could be liable for statutory damages as high as $150,000 as set forth in Section 504(c)(2) of the Digital Millennium Copyright Act (”DMCA”) therein.

This letter is official notification. I seek the removal of the infringing material referenced above. Please take note as a service provider, the Digital Millennium Copyright Act requires you, to remove or disable access to the infringing materials upon receipt of this notice. If you do not cease the use of the aforementioned copyrighted material a lawsuit will be commenced against you.

I have a good faith belief that use of the copyrighted materials described above as allegedly infringing is not authorized by the copyright owner, its agent, or the law.

I swear, under penalty of perjury, that the information in the notification is accurate and that I am the copyright owner or am authorized to act on behalf of the owner of an exclusive right that is allegedly infringed.

Best regards,
Tania Ortega”

Vulnerable targets clicking the Copyright Infringement Evidence link will download a document, which is said to be a ransomware trojan. This in turn can infect the target’s device and lock it up for ransom demand. Thus, any such suspicious email should be carefully observed before responding.

[Silent Watcher]

Avoid unnecessary posts such as 'Thank you', 'Welcome', etc. Such posts will be deleted and user will be warned if it happens again. If caught spamming, the following actions are applicable -

• First time - Warning
• Second time - 5000 Points will be deducted
• Third time - Ban for 7 days
• Fourth time - Permanent Ban

If the post helped you, reward the user by reacting to the post like this -