Scammers post videos titled "HOW TO HACK ANY INSTAGRAM 2024 - LINK IN DESCRIPTION." The description contains a shortened URL (bit.ly, tinyurl) leading to a MediaFire or Mega.nz folder hosting the malicious APK.
But the damage is already done. While you stared at the fake loading bar, the HackerBot had already installed the RAT in the background. Scammers target "script kiddies" (amateur hackers) because they are less likely to report the crime to the police, as they were initially trying to break the law themselves. HackerBot APK