The Russian hacker group FIN7 created multiple fake AI 'nudify' websites that promised to generate nude images from clothed photos but instead delivered malware including infostealers, credential stealers, and remote access trojans to victims who downloaded the supposed AI tools.
The Russian cybercriminal group FIN7 (also known as Sangria Tempest) operated a network of at least seven fake AI deepfake websites under variations of the 'aiNude.ai' brand that claimed to offer AI-powered tools to generate nude images from clothed photographs. The sites used two main attack vectors: a simple 'free download' option that redirected users to malicious Dropbox links, and a more sophisticated 'free trial' process that prompted users to upload images before downloading malware-laden files. The malicious payloads included Lumma Stealer, Redline Stealer, D3F@ck Loader, and NetSupport RAT malware designed to steal credentials, cookies, passwords, and other sensitive information. Silent Push cybersecurity researchers discovered the campaign and found that FIN7 used SEO tactics to rank their honeypot sites highly in search results, targeting users seeking deepfake software. The group also ran parallel malvertising campaigns spoofing legitimate brands like Microsoft and SAP Concur. All identified malicious sites were taken down after researchers reported them, but new sites following similar patterns are expected to emerge.
Domain classification, causal taxonomy, severity scores, and national security assessments were LLM-classified and may contain errors.
Using AI systems to gain a personal advantage over others such as through cheating, fraud, scams, blackmail or targeted manipulation of beliefs or behavior. Examples include AI-facilitated plagiarism for research or education, impersonating a trusted or fake individual for illegitimate financial benefit, or creating humiliating or sexual imagery.
Human
Due to a decision or action made by humans
Intentional
Due to an expected outcome from pursuing a goal
Post-deployment
Occurring after the AI model has been trained and deployed
No population impact data reported.