Hackers Use AI to Spread Viruses Disguised as ‘Undress’ Tools

The emergence of artificial intelligence (AI) has opened up many opportunities, but it has also given rise to new security challenges. One alarming trend is the use of AI-powered deepfake generators to deceive and compromise unsuspecting users. According to a recent report by security firm Silent Push, Russian hacker group FIN7 has been leveraging “Deepnude AI generators” to lure users into downloading malicious software under the guise of creating explicit images of women.

How Hackers Are Exploiting Deepfake AI Tools?

FIN7, a hacker group with ties to Russia, has reportedly created at least seven websites offering what appears to be an AI-based tool to “undress” women. These websites entice potential victims with promises of creating nude images from uploaded photos. However, instead of delivering the AI-generated content, the downloaded files infect the user’s device with viruses that can:

• Steal sensitive credentials: Malicious files can access and transmit login information, banking details, and other personal data to the hackers.
• Install ransomware: Hackers use ransomware to lock users out of their systems, demanding payment in exchange for releasing the data.

FIN7’s approach includes offering a “free trial,” where users can supposedly upload a photo to test the software. Once the victim agrees, malicious files begin installing, compromising their devices.

A Longstanding Cybercriminal Organization:

FIN7 has been active since at least 2013, and their activities extend far beyond these recent deepfake-related scams. Silent Push’s report reveals that the group has previously targeted the hospitality and food industries, conducting attacks to steal customer data and initiate fraudulent financial transactions. Notable companies like Chipotle, Chili’s, and Arby’s were among their past victims.

In addition, the group has created fake cybersecurity firms, such as Combi Security and Bastion Secure, to recruit unsuspecting tech workers and broaden their operations. Despite the arrests of some members, including their alleged leader, Ukrainian citizen Fedir Gladyr, FIN7 continues to pose a significant threat.

The Evolution of Cybercrime: AI and Adult Content

The use of adult content in cyberattacks isn’t a new tactic. In the early 2000s, cybercriminals used pornographic sites to spread Trojan horses and spyware. However, the integration of artificial intelligence in these schemes marks a troubling evolution in cybercrime tactics. AI has made it easier to generate fake, yet convincing, content, which can then be used to manipulate or deceive users into downloading malicious software.

Legal Actions and Future Concerns:

Recently, U.S. authorities filed lawsuits against websites that use AI to undress women without consent, highlighting the broader concerns surrounding AI-generated explicit content. While Silent Push analysts have successfully taken down the FIN7-operated websites they identified, experts warn that new sites are likely to emerge.

The rise of deepfake technology and its misuse for malicious activities underscores the importance of cybersecurity vigilance. Users should be cautious of downloading AI tools from unfamiliar websites, especially when they involve adult content. Meanwhile, tech firms and law enforcement agencies must continue working to detect and shut down these harmful operations before they cause further damage.

Conclusion:

The case of FIN7’s use of deepfake AI generators to distribute malware is a reminder of the growing intersection between advanced technology and cybercrime. While AI can be a force for good, its misuse by cybercriminals presents new challenges that require proactive measures from both users and authorities. As cybercriminals continue to evolve their tactics, the importance of awareness and cybersecurity defenses cannot be overstated.