"Disguised" as an AI tool on Facebook, luring users into falling into a malware trap

Many Facebook users have been tricked into downloading malware disguised as AI tools, causing personal information and cryptocurrency wallets to be silently stolen.

A new type of malware called “Noodlephile” is spreading rapidly on Facebook through fake AI tools. (Photo: morphisec)

Sites like “Luma Dreammachine AI” or “CapCut AI” pretend to be platforms that create videos and images using artificial intelligence to trick users. (Photo: morphisec)

When users access it, they are directed to software download links that appear trustworthy, but actually contain malicious code. (Photo: morphisec)

The downloaded file is named “VideoDreamAI.zip”, inside is a dangerous file with the extension “.mp4.exe” to trick the user’s vision. (Photo: morphisec)

When launched, the file triggers an infection chain, planting malware that can steal login credentials, cryptocurrency wallet data, and personal accounts.(Photo: eSecurity Planet)

The malware can also install the XWorm trojan, allowing hackers to remotely control the computer without the victim knowing. (Photo: Decrypt)

According to security firm Morphisec, the malware development group may originate from Southeast Asia, where Facebook scams frequently occur. (Photo: Bleeping Computer)

Users need to be wary of free AI software promoted on social networks and should only download from official sites to avoid becoming victims. (Photo: Digital Watch Observat)

Source: https://khoahocdoisong.vn/doi-lot-cong-cu-ai-tren-facebook-du-nguoi-dung-sap-bay-ma-doc-post1541662.html