Free Spotify Premium hacks on social media are spreading infostealers
2026-06-10T20:52:04Z•a2e5dd300f20807c7d7e46ecccdfba1db72413cf5ff69c82e8fe44c0f365031b
account-takeoverai-scamschromecredential-theftdeepfakesfake-appsinfostealerinstagrammacos-malwaremicrosoftmobile-malwarepatch-tuesdayphishingpirated-softwarescamssocial-media-malvertisingsupply-malwarebytestiktokzero-day
What happened
June 2026 Malwarebytes reporting highlights a surge in infostealer activity and credential theft campaigns delivered via social media (notably TikTok and Instagram Reels), pirated/repacked PC games, fake apps (including a malicious Mac BlueWallet drop) and malicious in-game ads. Infostealers are described as the preferred phishing payload due to low friction and scale, while separate stories flag fake-invoice, copyright-notice, and account-takeover scams (including abuse of a Meta AI support bot). Large vendor patching (Microsoft Patch Tuesday fixing 206 bugs including three zero-days; Chrome/
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- malwarebytes_labs
- Record identifier
- a2e5dd300f20807c7d7e46ecccdfba1db72413cf5ff69c82e8fe44c0f365031b
- Enrichment time
- 2026-06-10T20:52:04Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.