this post was submitted on 20 May 2025
6 points (87.5% liked)

cybersecurity

4132 readers
24 users here now

An umbrella community for all things cybersecurity / infosec. News, research, questions, are all welcome!

Community Rules

Enjoy!

founded 2 years ago
MODERATORS
shellsharks
tweedge
6
The Sting of Fake Kling: Facebook Malvertising Lures Victims to Fake AI Generation Website (research.checkpoint.com)
submitted 2 days ago by Pro@programming.dev to c/cybersecurity
0 comments fedilink hide all child comments
 
  • AI media generation is a significant trend in how we use the Internet in 2025. Kling AI is a widely used platform, with 6 million users since its launch in June 2024.
  • A threat actor mimicked Kling AI and drove traffic to a convincing fake website via counterfeit Facebook pages and paid ads.
  • User submissions of a text prompt or image on this fake site produce a seemingly innocent media file whose filename uses Hangul Filler characters to conceal an executable.
  • In some cases, the executable’s loader used .NET Native AOT compilation for stealth. Executing it installs an infostealer with monitoring capabilities.
  • This campaign has a global reach, with victims reported across multiple regions, most notably in Asia.
no comments (yet)
sorted by: hot top controversial new old
there doesn't seem to be anything here