Fake AI Image Generator Scam Spreads Malware, Targeting Content Creators and Businesses

Sophisticated Malware Campaign Exploits AI Trend

A new cybersecurity threat has emerged, exploiting the growing interest in AI-powered content creation tools. Cybersecurity researchers have uncovered a sophisticated malware campaign using a fake AI image and video generator called EditProAI to target both Windows and Mac users 1

1

2

2

3

3

.

The Deceptive Lure of EditProAI

The malicious software is being promoted through search results and social media advertisements, particularly on X (formerly Twitter), featuring attention-grabbing political deepfakes 1

1

2

2

. These ads lead users to professional-looking websites that mimic legitimate AI platforms, complete with standard elements like cookie consent banners and customer service chatbots 2

2

.

Malware Deployment and Data Theft

When users attempt to download the EditProAI software, they unknowingly install malware tailored to their operating system:

• Windows users receive the Lumma Stealer variant
• Mac users get the AMOS malware 1

  1

  2

  2

These malicious programs are designed to attack Chromium-based browsers, stealing a wide range of sensitive information:

• Login credentials and passwords
• Credit card details
• Cookies and browsing history
• Cryptocurrency wallet information 1

  1

  3

  3

Sophisticated Evasion Techniques

The Windows variant of the malware employs a stolen code-signing certificate from Softwareok.com, a freeware utility developer, to bypass Microsoft's built-in defenses 1

1

. This level of sophistication makes the threat particularly dangerous and difficult to detect.

Impact on Businesses and Content Creators

This scam poses a significant risk to businesses and content creators who are increasingly adopting AI tools for their work. Ed Gaudet, CEO of Censinet, warns that the campaign "represents an emerging threat vector as organizations embrace AI content tools" 3

3

. The surge in AI-related scams could potentially undermine consumer confidence in legitimate eCommerce platforms selling AI content tools, slowing adoption among online shoppers and merchants 3

3

.

Protecting Against the Threat

Cybersecurity experts recommend several measures to protect against this and similar threats:

1. Use reputable antivirus software and keep it updated 1

   1

   .
2. Stick to known sites and services with good reputations 1

   1

   .
3. Enable multi-factor authentication on sensitive accounts 3

   3

   .
4. Educate employees, especially creative teams, about cybersecurity awareness and the risks of downloading unfamiliar software 3

   3

   .
5. Implement zero-trust architecture in enterprise environments to isolate potential impacts of malware 3

   3

   .

The Broader Landscape of AI-Related Scams

This EditProAI scam is part of a larger trend of cybercriminals exploiting the AI boom. Similar scams have been observed on YouTube, where tutorials offer free access to popular software like Photoshop and Premiere Pro, but actually lead to malware infections 3

3

. The professional quality of these AI-generated scams makes them increasingly difficult to distinguish from legitimate content.

As AI tools continue to gain popularity, users and businesses must remain vigilant and prioritize cybersecurity measures to protect against these evolving threats.