

Clicking the subscribe button simply opened up the YouTube channel’s subscribe page but nothing checked to ensure we’d actually subscribed. Here, we had no validation taking place during our testing. Without doing this, you can’t gain access to a download link. So there’s one difference, right off the bat.Īnother interesting difference is that any initial survey page requires you to physically complete a survey before progressing. Instead, it asks you to hit subscribe on the social portal of the person sending you there in the first place. This site differs from typical survey pages, where you’d normally click offers or fill in questions to obtain a theoretical reward. The YouTube account offering this scam up has a little over 700 subscribers, and the video in question already had more than 2,200 views the day after being uploaded.Ĭlicking the link sends potential victims to a page on Sub2Unlock. In this scenario, would-be cheaters suffer a taste of their own medicine via a daisy chain of clickthroughs and (eventually) some malware as a parting gift. Offering up a malicious file under the pretense of a cheat is as old school as it gets, but that’s never stopped cybercriminals before. But buried in all of this was a nasty little slice of data theft malware disguised as a cheat tool. These videos can drive huge numbers: Here’s one that’s been pulled down, but managed to rack up 120,000 views before the hammer fell:Īlmost all of the scam tomfoolery followed the typical survey route, as expected. Here’s the current state of YouTube, for example: How did we find it? First, we sifted through a sizable mish-mash of free season six passes, supposedly “free” Android versions of Fortnite, which were leaked out from under the developer’s noses, the ever-popular blast of “free V-Bucks” used to purchase additional content in the game, and a lot of bogus cheats, wallhacks, and aimbots. Among all the gluttony of scams there hid a malicious file ready to steal data and enumerate Bitcoin wallets, for starters. Only this time, scammers had something a little more dangerous in mind than your typical low-level surveys and downloads that never actually materialize. It’s no surprise that con artists would jump on this bandwagon, eager to peddle their fakeouts.

The new season of the incredibly popular video game Fortnite is upon us, and so too are the scams.
