The threat group FIN7 is using the lure of generating nude images of favorite celebrities to get victims to download their NetSupport RAT.
In any social engineering scam, there’s always the need to create some sense of urgency to act in order to make the potential victim take an action that enables the attack. In the case of a new attack by threat group FIN7, the urgency appears to be the desire to see deepfake nude images.
According to cybersecurity vendor SilentPush’s analysis of FIN7’s activities, the threat group hosted seven honeypot websites using domain names that included the phrase “ai-nude” in them.
Source: Silentpush
The victim is prompted to upload an image and is then told their generated image is ready for download – with the download being a .zip file carrying a malicious payload.
SilentPush warns organizations to be wary of this attack and others like it, as they note that the malware being installed may compromise corporate credentials via infostealer functionality.
Organizations that enroll their employees in new-school security awareness training are better prepared for these kinds of malvertizing-based cyberattacks. Sure, the deepfake nudes lure is a real outlier here, but training does educate the employee on why it’s not advisable to visit and download files from unknown websites.
KnowBe4 empowers your workforce to make smarter security decisions every day. Over 70,000 organizations worldwide trust the KnowBe4 platform to strengthen their security culture and reduce human risk.
