🚨 Security Alert: YouTube Campaign Targeting FileMaker Beginners

Heads-Up!
,
1

I found a new threat vector targeting FileMaker users — this time through YouTube.

image
image1672Ă—941 363 KB

A search for “FileMaker Pro Crack” now returns dozens of recently created playlists following the same pattern:

  • legitimate FileMaker training videos;

  • repeated use of FileMaker Beginner Basics as an anchor;

  • official Claris and established community content mixed into the playlist;

  • a hidden or inserted “FREE DOWNLOAD LINK” video;

  • a pinned comment leading to Telegraph;

  • from there, users are sent toward Windows or macOS installation instructions.

The important part is this:

The trusted FileMaker videos are real.
The playlist around them is the trap.

This appears designed specifically to reach junior and inexperienced FileMaker users.

The attackers are borrowing credibility from:

  • FileMaker Beginner

  • Claris

  • ISO FileMaker Magazine

  • Productive Computing

  • other legitimate FileMaker educators

One observed delivery video instructs users to follow a pinned comment to a Telegraph page.

The macOS path then provides a Base64-obfuscated Terminal command that downloads and immediately executes remote shell code.

So this is no longer just suspicious SEO spam.

We now have a confirmed delivery chain:

YouTube search
→ crack-themed playlist
→ trusted FileMaker training videos
→ fake download video
→ pinned comment
→ Telegraph
→ installer / Terminal command

The operators do not need to fake being FileMaker experts.

They simply surround the lure with real experts.

That is what makes this campaign effective.

If you are new to FileMaker:

Do not trust a playlist because the videos inside it are legitimate.
Verify who created the playlist, who posted the download link, and where that link actually leads.

Full technical write-up and indicators are published on Cyber-FM.

filemaker #CyberSecurity #ThreatIntelligence malware #YouTube #SecurityAwareness #ClarisFileMaker #Infosec

5 Likes
2

Yikes!

3

This is very serius, they created 628 playlists THIS LAST WEEK.
I had my bot agent extract all the urls, and I sent them to Claris secuity / Apple.

3 Likes
4

This is the point in history where huge companies like YouTube, FaceBook, Instragram, etc, (who have all the resources and the means to prevent this from happening) are too lazy or slow or lack sufficient moral clarity to intervene to prevent AI empowered criminals from using online platforms as the entire toolkit for criminal enterprises.

3 Likes