Security News > 2024 > July > Infostealing malware masquerading as generative AI tools

Over the past six months, there has been a notable surge in Android financial threats - malware targeting victims' mobile banking funds, whether in the form of 'traditional' banking malware or, more recently, cryptostealers, according to ESET. Vidar infostealer targets Windows users.

Infostealing malware can now be found impersonating generative AI tools, and new mobile malware GoldPickaxe is capable of stealing facial recognition data to create deepfake videos used by the malware's operators to authenticate fraudulent financial transactions.

Video games and cheating tools used in online multiplayer games were recently found to contain infostealer malware such as the RedLine Stealer, which saw several detection spikes in H1 2024 in ESET telemetry.

In recent months infostealing malware also began to utilize the impersonation of generative AI tools.

In H1 2024, Rilide Stealer was spotted misusing the names of generative AI assistants, such as OpenAI's Sora and Google's Gemini, to entice potential victims.

Gaming enthusiasts who ventured out of the official gaming ecosystem were attacked by infostealers, as some cracked video games and cheating tools used in online multiplayer games were recently found to contain infostealer malware such as Lumma Stealer and RedLine Stealer.

News URL

https://www.helpnetsecurity.com/2024/07/05/infostealing-malware-generative-ai/