FAKE CHATGPT AND INVIDEO AI DOWNLOADS DELIVER RANSOMWARE

Summary from the TLDR InfoSec newsletter

Cisco Talos has discovered three malware families—CyberLock ransomware, Lucky_Gh0$t ransomware, and Numero malware—that disguise themselves as legitimate AI tool installers for ChatGPT, InVideo AI, and NovaLeadsAI. These threats spread through SEO poisoning, social media, and messaging platforms, specifically targeting sales, technology, and marketing businesses. CyberLock demands $50,000 in Monero cryptocurrency, Lucky_Gh0$t encrypts files under 1.2GB while destroying larger ones, and Numero renders Windows systems unusable by interfering with the graphical interface.