Russian Cybercriminals Exploit AI-Generated Sites to Steal Crypto Wallet Credentials

A Russian cybercrime group is reportedly leveraging a series of AI-generated websites to implement software aimed at stealing cryptocurrency wallet credentials.

As detailed in a report by 404 Media, cybersecurity professionals at Silent Push have discovered that the Fin7 ransomware group has established at least seven such websites that produce explicit images using artificial intelligence.

These sites covertly install malware, including “RedLine” and “Lumma,” which are designed to gather user credentials and other sensitive information. Infections typically occur when users either download software via Dropbox links or sign up for free trials, which automatically prompts the download.

Zach Edwards, a senior cybercrime analyst at Silent Push, emphasized that these tactics are particularly aimed at affluent individuals who utilize AI tools or possess cryptocurrency accounts.

He remarked that there is a distinct market for cutting-edge yet dubious AI applications, especially among those seeking “deepfake” image generators, even if it involves legal risks.

Meanwhile, Russian authorities have reported the arrest of around 100 people suspected of laundering money for hackers and other cybercriminal enterprises.