Russian Hackers Use Deepfake Porn to Steal Crypto Wallets[embed]https://www.youtube.com/watch?v=MJmt8q7_RL4[/embed]

<img src="https://protos-media.s3.eu-west-2.amazonaws.com/wp-content/uploads/2024/10/03132136/Protos-Artwork-RussiaMalware.jpg" /><br><div id="bsf_rt_marker">

<p>Hackers from Russia are leveraging a series of AI-powered 'nudify' websites to distribute malware that can capture cryptocurrency wallet login information.</p>
<p>As <a href="https://www.404media.co/a-network-of-ai-nudify-sites-are-a-front-for-notorious-russian-hackers-2/" target="_blank" rel="noreferrer noopener">covered</a> by 404 Media, researchers from Silent Push have found that the Russian ransomware collective Fin7 has established at least seven AI-generated deepfake sites focused on creating non-consensual nude imagery.</p>
<p>The websites harvest crypto credentials and other private information utilizing 'RedLine' and 'Lumma' malware. Victims are infected after downloading the purported nudify application from a Dropbox link or signing up for a free trial that also prompts the download of the harmful malware. </p>
<figure class="wp-block-embed is-type-wp-embed is-provider-protos wp-block-embed-protos"/>
<p><em>Read more: High treason charge for Russian man who ‘sent crypto to Ukraine’</em></p>
<p>Zach Edwards, a senior threat analyst with Silent Push, indicated that the nudify tactic specifically targets <strong>“men with a significant amount of wealth who engage with other AI technologies or possess crypto accounts.”</strong></p>
<p>“There is a distinct audience eager to explore the cutting edge of unsettling technology (while disregarding emerging regulations on deepfakes), actively searching for deepfake AI nude software,” Edwards told 404 Media.</p>
<p>This week, Russian hackers are in the spotlight following the US's enforcement <a href="https://home.treasury.gov/news/press-releases/jy2616" target="_blank" rel="noreferrer noopener">actions</a> against cryptocurrency exchanges Cryptex and PM2BTC, alongside a suspected money launderer involved with ransomware operators and various other illicit activities.</p>
<figure class="wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio"><p>

</p><figcaption class="wp-element-caption">Video posted by the Investigative Committee of Russia illustrating the raids. </figcaption></figure>
<p>On Wednesday, Russia <a href="https://cyberscoop.com/russian-cybercrime-raids-cryptex-uaps/" target="_blank" rel="noreferrer noopener">declared</a> the detention of nearly 100 individuals accused of laundering money on behalf of cybercriminals and hackers.</p>
<p><em>Have a tip? Reach out to us via email or ProtonMail. For more insightful news, follow us on <a href="https://twitter.com/protos" target="_blank" rel="noreferrer noopener">X</a>, </em><a href="https://www.instagram.com/protosmedia/" target="_blank" rel="noreferrer noopener"><em>Instagram</em></a><em>, </em><a href="https://bsky.app/profile/protos.bsky.social" target="_blank" rel="noreferrer noopener"><em>Bluesky</em></a><em>, and </em><a href="https://news.google.com/publications/CAAqBwgKMLmroQsw0bW5Aw" target="_blank" rel="noreferrer noopener"><em>Google News</em></a><em>, or subscribe to our </em><a href="https://youtube.com/protosmedia" target="_blank" rel="noreferrer noopener"><em>YouTube</em></a><em> channel.</em></p>
</div><script async src="//platform.twitter.com/widgets.js" charset="utf-8"></script><script async src="//www.instagram.com/embed.js"></script>