YouTube Removes 3,000 Malware Videos in Urgent Crackdown

UPDATE: YouTube has just removed 3,000 malicious videos linked to a sophisticated malware distribution network known as the YouTube Ghost Network. This urgent action follows a detailed investigation by Check Point Research, which unveiled the network’s operations exploiting user trust through fake engagement tactics.

The videos, primarily disguised as ‘Game Hack/Cheat’ and ‘Software Cracks/Piracy’, targeted a large audience eager for illegal software downloads. These deceptive uploads were not only popular but appeared legitimate, with one video targeting Adobe Photoshop racking up 293,000 views and another for FL Studio reaching 147,000 views.

Researchers warn that these videos were spreading dangerous malware, including infamous Rhadamanthys, Lumma infostealers, and RedLine malware strains. The use of social media and fake positive interactions disarmed viewers, making them more susceptible to these threats.

The YouTube Ghost Network has been active since at least 2021, with the number of malicious videos tripling in 2025, highlighting the growing effectiveness of this campaign. “The network maintained a steady output of malicious content each year,” Check Point noted, stressing the urgency for users to remain vigilant.

This alarming trend mirrors a broader issue in which malware has proliferated across platforms, with similar campaigns detected on Reddit and WeTransfer. These tactics underline the necessity for internet users to exercise caution, especially as reports suggest that up to 50% of all internet traffic may stem from bots.

As Google intensifies its efforts against these malware threats, the tech community is urged to stay informed and safeguard their devices. Stay tuned for further updates on this developing story as the fight against digital threats continues.