Highlights
- Spotify playlists and podcasts are being misused to promote malware, pirated software and spam.
- Spotify has removed specific harmful playlists after the post went viral.
- The platform introduced new features for audiobooks including a sleep timer, audiobook playlists, countdown pages, author pages, video previews and follow-along visuals.
In a concerning discovery, security researchers uncovered how Spotify is being misused to promote malware, pirated software and spam through playlists and podcasts. According to a recent 404 Media report, playlists and podcast descriptions are being exploited to share links to malicious software, cheat codes and even gambling sites.
Recently, Security researcher Karol Paciorek shared on X (formerly Twitter) a screenshot of such a podcast involving a playlist titled “Sony Vegas Pro13 Crack Free Download 2024 mysoftwarefree.com”. It can be seen in the screenshot that the playlist promoted a website known for hosting malware.
🚨 Cybercriminals exploit Spotify for #malware distribution. 🎵
Why? Spotify has a strong reputation and its pages are easily indexed by search engines, making it an effective platform to promote malicious links. pic.twitter.com/MGloGZykCp
— Karol Paciorek (@karol_paciorek) November 18, 2024
Although Spotify removed this specific playlist after the X post went viral, Paciorek warned his followers that the problem is widespread.
Paciorek explained that users can easily find links to “Vbucks generators” for Fortnite and “license key cracks” for pirated software embedded in other playlists and podcast descriptions.
Another user shared screenshots of more such playlists and podcasts that are using the description for “their SEO poisoning campaign.”
Seems like the “Fortnite Vbucks” spammers found a way to involve Spotify Podcasts into their SEO poisoning campaign, featuring SPAM links to movies and books fake downloads… (And of course Fortnite Vbucks 😎)
👀 @Spotify pic.twitter.com/0dbqjil9zX
— Who said what (@g0njxa) August 21, 2024
In a statement to 404 Media, Spotify responded to the concerns saying: “Spotify’s Platform Rules prohibit posting, sharing, or providing instructions on implementing malware or related malicious practices that seek to harm or gain unauthorized access to computers, networks, systems, or other technologies.”
The report also highlights how spammers exploit Spotify’s search engine optimization (SEO) to spread these links. Even when Spotify blocks certain keywords on its platform, those keywords can still appear in Google search results leading users to the harmful links.
It appears spammers often use misleading titles and irrelevant audio content to boost visibility.
New Audiobook Features on Spotify
In a separate update, Spotify rolled out a host of new updates for audiobook listeners to elevate their overall experience on the app.
Announced in a Press Note titled “6 Spotify Audiobook Features That Level Up Your Listening Experience,” Spotify noted: “Since launching our audiobook offering, we’ve continuously upped our game on designing a user experience that provides seamless and engaging listening.”
Spotify shared details of the following features –
Sleep Timer: This feature allows users to set a timer for how long an audiobook will play. It is perfect for those who listen while falling asleep. The timer already exists for podcasts and music.
Audiobook Playlists: Users can now create playlists specifically for audiobooks helping them organize their reading lists. Spotify will also offer curated playlists from its audiobook editorial team.
Countdown Pages: These splash pages let users save books before their release date, making them easy to find once they’re out. Spotify says this tool will help authors, publishers, and narrators promote upcoming titles.
Author Pages: A pilot feature that provides biographical information and catalogues for select authors.
Video Previews: Some audiobooks will now include short videos submitted by authors or publishers, offering a preview of the content. Spotify describes this as similar to a book jacket. The press note specifies that the video preview “can be an interview snippet, a backstage video from the audio recording session, a video message from the author, or something else.”
Follow-Along: It will provide an immersive visual experience letting users get time-synchronized illustrations, photos and graphics as they are listening to an audiobook. The press note suggests users “think: the supporting material usually included in paper books as you listen to an audiobook.” Available in the “extras” section, This feature will help contextualise an audiobook.
FAQs
Q1. What security issues have been discovered on Spotify?
Answer. Security researchers found that Spotify playlists and podcasts are being misused to promote malware, pirated software, and spam through links in descriptions.
Q2. How did Spotify respond to the misuse of its platform for promoting malicious content?
Answer. Spotify has removed specific harmful playlists and stated that its platform rules prohibit sharing malicious content, although the problem persists.
Q3. What new feature allows Spotify users to control the duration of audiobook playback?
Answer. The new Sleep Timer feature allows users to set a timer for how long an audiobook will play, which is ideal for those who listen while falling asleep.
Q4. How can users organise their audiobook reading lists on Spotify?
Answer. Users can now create playlists specifically for audiobooks, helping them organize their reading lists. Spotify will also offer curated playlists from its audiobook editorial team.
Q5. What is the Follow-Along feature in Spotify’s audiobook updates?
Answer. The Follow-Along feature provides an immersive visual experience by offering time-synchronized illustrations, photos, and graphics as users listen to an audiobook.
Read More: Now Add Music to Your Spotify Library Directly From Instagram With New Integration
Read More: Spotify Launches Offline Backup for Premium Users
Read More: Spotify Introduces AI Playlist Generation for Premium Users in the US
Join MyMobile WhatsApp Channel
