Short-form videos promising free Spotify Premium have been used as a lure, with Windows users directed toward PowerShell commands that can deliver malware.