S03 E08: Hijacked Hashtags and Potential Malware in Short URLs on Social Media

Podcast Summary: ShadowDragon - Malware Alert on Social Media

In this episode of the ShadowDragon podcast, Nico "Dutch OSINT Guy" Dekens delves into a recent surge in malicious online activity linked to trending topics on social media platforms such as X (formerly Twitter), Meta (Facebook), and Instagram. The discussion centers around a disturbing trend observed on August 8th, where malicious actors hijacked popular hashtags, including those related to the UK riots and other global events, by posting deceptive content designed to lure users into clicking dangerous links.

These malicious posts often feature images flagged as "sensitive content," which, when clicked, direct users to a series of redirects that ultimately lead to scam sites, frequently with pornographic content. Nico warns listeners about the common characteristics of these posts, which include accounts with English-sounding usernames followed by a series of numbers and profile pictures of Asian-looking women. Nico also highlights how these tactics have been used across various events, from the Paris Olympics to the ongoing Ukraine-Russia conflict.

The episode emphasizes the importance of caution when engaging with such content online and provides insights into how malware analysis tools, like Any.Run and VirusTotal, can help identify the threats posed by these malicious links. The host concludes by urging listeners to stay vigilant and avoid falling prey to these social media scams.

Listeners are encouraged to like, subscribe, and share the ShadowDragon podcast and to reach out to the host, known online as "Dutch OSINT Guy," for more information.