A Russian cybercrime group is reportedly leveraging a series of AI-generated websites to implement software aimed at stealing cryptocurrency wallet credentials.
As detailed in a report by 404 Media, cybersecurity professionals at Silent Push have discovered that the Fin7 ransomware group has established at least seven such websites that produce explicit images using artificial intelligence.
These sites covertly install malware, including “RedLine” and “Lumma,” which are designed to gather user credentials and other sensitive information. Infections typically occur when users either download software via Dropbox links or sign up for free trials, which automatically prompts the download.
Zach Edwards, a senior cybercrime analyst at Silent Push, emphasized that these tactics are particularly aimed at affluent individuals who utilize AI tools or possess cryptocurrency accounts.
He remarked that there is a distinct market for cutting-edge yet dubious AI applications, especially among those seeking “deepfake” image generators, even if it involves legal risks.
Meanwhile, Russian authorities have reported the arrest of around 100 people suspected of laundering money for hackers and other cybercriminal enterprises.
The U.S. Department of Justice has sentenced Dwayne Golden, 57, of Pennsylvania to 97 months in prison for orchestrating a fraudulent crypto investment scheme that stole over $40 million from investors.
The first half of 2025 has become the most damaging six-month period in crypto history, with over $2.1 billion stolen across 75+ separate incidents, according to new data.
A new breed of cyber-attack is sweeping through crypto media, exploiting site pop-ups and wallet-connect prompts instead of smart-contract bugs.
CoinMarketCap, one of the most widely used crypto data tracking platforms, is reportedly facing a front-end security breach, with multiple users encountering a suspicious prompt to verify their wallets.