A fake AI image and video generator is infecting Windows and macOS systems with theinfo-stealer Lumma Stealer and AMOS malware. Specifically, the two malware are used to steal credentials and cryptocurrency wallets.
Lumma Stealer targets Windows systems and AMOS macOS. However, they operate similarly, stealing crypto wallets and cookies, credentials, passwords, credit cards , and browsing history from various browsers, including Google Chrome, Microsoft Edge, and Mozilla Firefox.
The data is collected into a file and sent to the attackers.
See also: Vietnamese hacker group develops new PXA Stealer
Fake AI image and video generators distribute info-stealer malware
Last month, cybercriminals created fake websites for an AI video and image generator called EditPro. The fake websites are promoted through search results and ads on X that share deepfake videos of politicians.
By clicking on the images, users are taken to fake websites for the EditProAI application, with editproai[.]pro promoting Lumma Stealer for Windows and editproai[.]org promoting AMOS for macOS.
The fake websites are meticulously designed to appear legitimate and even contain cookie bannersto make them appear even more trustworthy.
However, clicking on the “Download Now” links downloads an executable file that pretends to be the EditProAI application. For Windows users, the file is called “Edit-ProAI-Setup-newest_release.exe” [VirusTotal] and for macOS, it is called “EditProAi_v.4.36.dmg” [VirusTotal].
See also: New Glove infostealer bypasses Chrome cookie encryption
Those who have downloaded the fake AI image and video generator should consider all their saved passwords, crypto wallets, and authentication checks to have been compromised. Therefore, they should immediately change their passwords and check their accounts.
Protection from info-stealer malware
Static detection methods for security are not enough to avoid software antivirus malware . A more robust approach should incorporate , equipped with advanced analysis capabilities.
It's also important to keep your operating system and applications up to date. These updates often include security that can protect your computer from the latest threats.
Information security training is also crucial. This means knowing how to recognize and avoid phishing attacks , which attackers often use to install info-stealers.
See also: Hive0145 hackers: Phishing attacks distribute Strela Stealer in Europe
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
Also, don't forget to use firewalls and monitor network traffic to help you immediately detect suspicious activity. Users to avoid executable files downloaded from strange websites.
Finally, using strong passwords and enabling two-factor authentication can provide an extra layer of protection. This can make it harder for attackers to gain access to your account, even if they manage to steal your password.
Source: www.bleepingcomputer.com
