Cybercriminals are increasingly using AI and small business tools as a facade for ransomware attacks, exploiting the growing adoption of AI by small businesses. Cisco Talos revealed that malicious actors are disguising malware within counterfeit software resembling reputable services like Nova Leads and ChatGPT. Many small enterprises are misled into downloading these false tools, compromising their sensitive data and financials.
One example includes a fake Nova Leads website offering a non-existent AI tool, which actually deploys ransomware called CyberLock. Another instance involved an installer for ChatGPT that hid ransomware Lucky_Gh0$t alongside legitimate AI tools as a deceptive tactic. The increasing prevalence of such tactics, coupled with techniques like SEO poisoning to rank these malicious sites high in searches, poses significant risks.
To defend against ransomware, small businesses are advised to patch vulnerabilities, implement stringent cybersecurity measures, maintain offline backups, and thoroughly eradicate any traces of malware after an attack.
Source link
