Phishing
Fake logins and lures
Criminals exploit ebook downloads with malware, fake search pages and phishing
Kaspersky describes how attackers target ebook readers through pirate sites that deliver malware disguised as books, including a miner and infostealers hidden in fake PDFs. Search spam pages, fake Goodreads and Orell Füssli adverts, and clones of pirate libraries such as Z-Library are used to harvest card details and credentials. The article also notes a 2024 Z-Library clone leak of about 10 million user records and a 2025 Kindle vulnerability that could allow account hijacking.