How the Scam Works

Cybercriminals have recently launched deceptive websites masquerading as an AI video and image editor called EditPro. As uncovered by cybersecurity expert g0njxa, these malicious sites are cleverly promoted through search engine results and targeted ads on social media platforms, featuring enticing content like deepfake videos of political figures, including Joe Biden and Donald Trump, sharing a light-hearted moment over ice cream.

The Malware Installation

Clicking on the “Get Now” button initiates the download of a malicious executable file masquerading as the EditProAI installer. Windows users will find a file named "Edit-ProAI-Setup-newest_release.exe," while macOS users receive "EditProAi_v.4.36.dmg." Alarmingly, the Windows version of the malware has been signed with what appears to be a stolen code-signing certificate from Softwareok.com, a known freeware developer.

Are You at Risk?

If you have previously downloaded applications from these misleading sites, experts recommend that you treat all of your stored passwords, cryptocurrency wallets, and authentication details as compromised. Immediate action is advised, which includes resetting passwords across all your accounts with unique credentials and enabling multi-factor authentication (MFA) on sensitive platforms like cryptocurrency exchanges and online banking services.

Conclusion

As the digital landscape continues to evolve, the threat of malware infections, particularly those posing as legitimate AI tools, is escalating. Users are urged to be vigilant and cautious about the software they install, especially apps that promise advanced features that may seem too good to be true. Stay informed, stay secure, and take proactive measures to protect your valuable data from these cunning cyber threats.