Cybersecurity experts are warning that millions of users could be at risk after a surge of fake Facebook ads promoting AI-powered video generation tools was discovered to be distributing malware.
Malicious Campaign Targets AI Enthusiasts
Google’s Mandiant Threat Defense group has uncovered a campaign, tracked as UNC6032, that leverages the growing interest in AI tools—specifically those that generate videos from text prompts. The group has been linked to Vietnam and is using sophisticated tactics to impersonate legitimate AI video generator platforms.
According to Mandiant, thousands of fake websites have been set up, mimicking well-known AI tools such as Canva Dream Lab, Luma AI, and Kling AI. These fraudulent sites are promoted through ads on Facebook and LinkedIn, with a sample of 120 malicious ads reportedly reaching over 2.3 million users. Experts believe similar campaigns may be active on other social media platforms as well.
How the Scam Works
Victims are lured by seemingly harmless ads for cutting-edge AI video editors. When users click on these ads, they are directed to fake websites that distribute malware instead of genuine software. The malware includes Python-based infostealers and various backdoors, putting both personal and organizational data at risk.
“Although our investigation was limited in scope, we discovered that well-crafted fake ‘AI websites’ pose a significant threat to both organizations and individual users,” Mandiant researchers stated. “These AI tools no longer target just graphic designers; anyone can be lured in by a seemingly harmless ad.”
Staying Safe Online
Experts urge users to exercise caution when encountering AI tool ads on social media. Before downloading or interacting with any advertised software, users should:
- Verify the legitimacy of the website’s domain
- Manually search for the tool or company via a search engine
- Be wary of deals or offers that seem too good to be true
“The temptation to try the latest AI tool can lead to anyone becoming a victim,” researchers warn. Vigilance and skepticism are key to avoiding these sophisticated scams.
Protecting Your Devices
In addition to careful vetting of online ads, users are encouraged to use reputable malware removal tools and keep their security software up to date to help safeguard their devices from emerging threats.
