Threat Group Use AI Adult-Based “Deepnude” Image Generator Honeypots to Infect Victims

The threat group FIN7 is using the lure of generating nude images of favorite celebrities to get victims to download their NetSupport RAT.

In any social engineering scam, there’s always the need to create some sense of urgency to act in order to make the potential victim take an action that enables the attack. In the case of a new attack by threat group FIN7, the urgency appears to be the desire to see deepfake nude images.

According to cybersecurity vendor SilentPush’s analysis of FIN7’s activities, the threat group hosted seven honeypot websites using domain names that included the phrase “ai-nude” in them.

Source: Silentpush

The victim is prompted to upload an image and is then told their generated image is read for download – with the download being a .zip file carrying a malicious payload.

SilentPush warns organizations to be wary of this attack and others like it, as they note that the malware being installed may compromise corporate credentials via infostealer functionality.

Organizations that enroll their employees in new-school security awareness training are better prepared for these kinds of malvertizing-based cyberattacks. Sure, the deepfake nudes lure is a real outlier here, but training does educate the employee on why it’s not advisable to visit and download files from unknown websites.

KnowBe4 empowers your workforce to make smarter security decisions every day. Over 70,000 organizations worldwide trust the KnowBe4 platform to strengthen their security culture and reduce human risk.

---

Free Phishing Security Test

Would your users fall for convincing phishing attacks? Take the first step now and find out before bad actors do. Plus, see how you stack up against your peers with phishing Industry Benchmarks. The Phish-prone percentage is usually higher than you expect and is great ammo to get budget.

Here’s how it works:

• Immediately start your test for up to 100 users (no need to talk to anyone)
• Select from 20+ languages and customize the phishing test template based on your environment
• Choose the landing page your users see after they click
• Show users which red flags they missed, or a 404 page
• Get a PDF emailed to you in 24 hours with your Phish-prone % and charts to share with management
• See how your organization compares to others in your industry

PS: Don’t like to click on redirected buttons? Cut & Paste this link in your browser: https://info.knowbe4.com/phishing-security-test-partner?partnerid=001a000001lWEoJAAW