Cybercriminals Exploit Fake Tool Installers to Target Victims, Aiming for AI Platforms Like ChatGPT

Cyber criminals are increasingly using malware disguised as popular AI tool installers, particularly targeting B2B sales and the technology and marketing sectors. Cisco Talos has identified several threats, including CyberLock and Lucky_Gh0$t ransomware, alongside a new malware called ‘Numero’. These cyber threats often utilize SEO poisoning to push malicious sites to the top of search engine results, and they also communicate through platforms like Telegram and social media to deceive victims. For instance, CyberLock ransomware encrypts specific files, with ransom payments claimed to support humanitarian causes. Meanwhile, Lucky_Gh0$t masquerades as a ChatGPT installer, embedding its ransomware within seemingly legitimate files. The new Numero malware affects Windows GUI components, rendering systems unusable and is disguised as the InVideo AI installer. This trend not only risks sensitive business data but also erodes trust in legitimate AI solutions.

Source link