Cybercriminals Deceive Users with Fraudulent AI Applications

A new malware campaign, dubbed Noodlophile, is targeting users on Facebook and other platforms by masquerading as AI video editing tools. Cybercriminals are employing sophisticated tactics, creating convincing fake websites and advertising through realistic social media promotions. Victims are enticed with the promise of AI-generated content and inadvertently download malicious ZIP files when they attempt to access these tools. Once installed, the malware can steal sensitive information, including browser credentials and cryptocurrency wallet details. Linkage to a Vietnamese developer, self-identified as a “passionate Malware Developer,” highlights the ongoing cybercriminal activity in the region. Additionally, Noodlophile may be bundled with other remote access tools, allowing attackers extended control over infected systems. This incident underscores a broader trend of exploiting public interest in AI for malicious purposes, similar to previous attacks linked to ChatGPT. Cybersecurity experts also report emerging threats, such as PupkinStealer, which covertly transmits stolen data via Telegram.

Source link