{"id":22399,"date":"2019-04-02T03:02:52","date_gmt":"2019-04-01T16:02:52","guid":{"rendered":"https:\/\/www.kaspersky.com.au\/blog\/tv-series-threats\/22399\/"},"modified":"2019-11-15T22:26:52","modified_gmt":"2019-11-15T11:26:52","slug":"tv-series-threats","status":"publish","type":"post","link":"https:\/\/www.kaspersky.com.au\/blog\/tv-series-threats\/22399\/","title":{"rendered":"On the dangers of popular television series"},"content":{"rendered":"

Despite an increasing number of people preferring to stream their TV shows and generally opting for legally obtained content, pirates and BitTorrent sites hold their ground. And because, from a legal standpoint, torrent sites are in a gray-fading-into-black area, they have been a playground of choice for cybercriminals disguising their malicious files as useful stuff.<\/p>\n

The serial threat<\/h2>\n

The easiest to deceive among torrent site users are those looking to download software: Slip in a different executable and the user\u2019s hooked. However, scammers are interested in anything that is popular with users, and television series might be the hottest thing these days, so these, too, are being used as disguise for all kinds of malware. So, we decided to analyze what dangers a wish to download a popular TV show from a torrent site may bring upon you.<\/p>\n

We used IMDB and Rotten Tomatoes ratings to select 31 television series and downloaded anonymized statistics on them from our KSN cloud service to find out what types of malware users who dealt with the shows have encountered.<\/p>\n

Guessing what show would prove the most popular among scammers was easy: It\u2019s Game of Thrones<\/em>. According to our statistics, Game of Thrones<\/em>\u2013related malware species that attacked users in 2018 numbered almost 10,000 \u2014 or 9,986 to be exact. These malicious programs attempted to infect the users\u2019 machines more than 120,000 times. That is just the year 2018, and the statistics are limited to users of our solutions, so the total number of attacks worldwide should be far larger.<\/p>\n

Most times, malware tries to pass as the first or the final episode. The very first episode of the first season of Game of Thrones<\/em>, \u201cWinter is Coming,\u201d is the absolute leader in the number of attacks.<\/p>\n

The runner-up among TV shows, both in terms of users attacked and the number of attacks, is The Walking Dead<\/em>. These two lead by a significant margin: Arrow,<\/em> in third place overall, accounted for about two-thirds the number of users attacked, and in terms of the number of attacks it was used for represents less than one-third.<\/p>\n\n

What you might get instead of your TV show<\/h3>\n

If someone is seeding something disguised as a TV show, and it\u2019s not a TV show, then it is likely to be real malware: some type of Trojan. Our statistics suggest that you are most likely to encounter the WinLNK Trojan<\/a>, which is capable of downloading other malware.<\/p>\n

Also very likely is becoming the happy owner of one of two types of so-called not-a-virus<\/a> software: adware<\/a> or downloaders<\/a>. Neither of these will bring you any particular joy. Adware throws ads at you whenever possible, and downloaders will likely be an intermediate step to getting adware \u2026 or something worse.<\/p>\n

How to know you have downloaded malware instead of a TV show<\/h3>\n

April through May is going to be intense: The final season of Game of Thrones<\/em> hits the screens first, followed by the third season of the popular Westworld<\/em>, and then it just goes on from there. That means lots of us will be watching and downloading shows, whereas rogues will be doubling or even tripling their efforts to spread infections camouflaged as the public\u2019s well-loved TV series.<\/p>\n

To stay safe you have to be alert. First and foremost, we advise against dealing with illegal distribution channels and in favor of official channels. Yes, you have to pay for those, but that is much safer.<\/p>\n\n

If you still intend to use torrent sites, then at least you need to learn to tell if what you have downloaded is the real thing or a decoy. Here is how to know the difference:<\/p>\n