Imagine a world where cyber criminals wield the same technological prowess as the companies they are trying to scam. Unfortunately, this is not a futuristic fantasy but a harsh reality. AI-powered malware, like the recent ‘Realst’ discovery by Cado Security Labs, is redefining the game of cat and mouse. This sneaky malware targets macOS and Windows users by mimicking legitimate video-calling software, convincing fake companies to be real in unsuspecting victims.
Let us understand how it works. Consider receiving a message on Telegram from a person acting as your old friend, pitching a business opportunity, and sending a link to download video-calling software from some site that looks very legitimate. The site ‘Meeten’ appears very professional and has AI-generated blogs and content, but the downloaded software is basically a trap.
Once installed, the malware steals sensitive data such as passwords, banking details, and even cryptocurrency stored in browsers like Chrome and Safari. In some cases, the website alone can siphon cryptocurrency without requiring a fullmalware installation.
An example is a phishing email in which the scammer poses as a trusted peer inviting you to a meeting. You then click on the link, download the application, and unwittingly give up access to your device. Soon after, all your data is compressed, zipped, and uploaded to a server controlled by the hackers while you are busy troubleshooting fake error messages.
For security, make sure you download software from official websites and take a close look at messages you did not ask for. Be cautious of messages or links from unknown sources, as they could be traps. Protect your accounts by setting up Two-Factor Authentication (2FA), which adds a layer of security, and use strong, unique passwords for each account. Regularly update your devices and apps to fix any vulnerabilities hackers might exploit.
While AI can be incredibly helpful, scammers are also using it to create convincing traps. Staying alert is your best defense. If someone sends you a link to join a video call, then use known platforms like Zoom or Google Meet. Stay away from software applications you have not heard of before. In this way, you may prevent being fooled into believing you are using an effective device for an impossible scam.