Criminals are using installers for fake AI software to distribute ransomware and other destructive malware.
Cisco Talos recently uncovered three of these threats, which use legit-looking websites whose domain names vary the titles of actual AI vendors by just a letter or two. The software installers on the sites are poisoned with malware, including the CyberLock ransomware and a never-before-seen malware named “Numero” that breaks Windows machines.
The Talos research follows a similar…
Article Source
https://www.theregister.com/2025/05/30/fake_ai_installers_carry_ransomware/

