The website check point has just published a new study, showing that many malicious groups are using fake Facebook pages and groups devoted to artificial intelligence to distribute malware and steal user data.
These pages and these groups are widely disseminated through simple ignorance of the risks.
Using engagement to hack: Facebook victim of AI scammers
check point pinpointed a new phenomenon. We were already used to fake pages and phishing emails trying to impersonate telephone companies or taxes. But now hackers are now attacking generative AIs such as Bard, ChatGPT, Jasper, or Midjourney.
All these pages and all these groups are more or less trying to deceive the vigilance of Facebook users and push them to click on various links. These can trigger a download or redirect to another page, but the purpose is the same: to make the victims install malware responsible for extracting personal information.
Where the process is particularly vicious is that it relies on engagement, a pillar of social networks, as well as on public interest in these AIs. Thanks to fake profiles, but also to real exchanges between AI enthusiasts, pages and groups are spreading like wildfire in the feeds of users and their contacts.
You can find everything on these pages, namely news, images generated elsewhere, fake superior versions of known software and even real links in the middle of the fake ones. And when you lack attention or are unaware of these fraudulent practices, it’s hard to believe that a page with several hundred thousand subscribers is fake.
How to avoid getting tricked?
With nearly 3 billion accounts, Facebook is an ideal target for hackers. Even with a very low success rate, we are talking about millions of potential victims, more than enough to enrich them. But how to fight against these pages and avoid being fooled. If you are used to paying attention to phishing techniques, do not hesitate to sign the pages and inform your most vulnerable relatives.
Otherwise, ignore the display name first, as it can, like email, be completely personalized. Instead, check the domain name present if possible, the contact address or the spelling of the links offered. In general, don’t download anything from a Facebook page or group. Reliable sources are easy to find with a simple search, and this will save you a lot of trouble.
Watching comments can also save you the day. Check Point noticed that many profiles posting fake messages use names of Vietnamese origin. If you see a lot of them, beware. Finally, there are many sites, including PhishTank, which allow you to verify the authenticity of an address for you.
Source : check point
0