A game you can’t win: threat actors leveraging hit TV series Squid Game for threats and scams

Published 11/3/21, 9:00am

The popular streaming series Squid Game is the latest target for scams and malware according to recent industry research. With the series now the most watched show of all time on one of the entertainment industry’s most popular streaming services, threat actors are wasting no time creating malicious files containing trojan downloaders linked to the Squid Game name. Researchers point out that cybercriminals are getting highly creative in their attack methods. One scheme involves an animated version of the first game from the series that, when watched, simultaneously launches a data-stealing trojan. Malicious Squid Game-themed apps have also been discovered in third-party app stores. 

This isn’t the first time pop culture scams have appeared in the world of cybercrime. Back in July, phishing, malicious files and other fraudulent scams were linked to fake promotions for the highly anticipated movie Black Widow. 

Next Steps

Security researchers remind users to double-check URLs before clicking or opening them and to never click on a link in an unsolicited email. Misspellings and substituted characters can be an indication that the URL is not legitimate. Users are also reminded that videos don’t end in .exe, .pkg., .dmg., or .msi, which all suggest the potential for malicious executable files. Most importantly, it is critical to remember that shows like Squid Game are protected by copyright laws. Games, videos, and merchandise should only be downloaded or purchased from official sites.