Cybersecurity News in Asia

RECENT STORIES:

SEGA moves faster with flow-based network monitoring
Android trojan mimics human typing traits to evade behavioral detectio...
Embedding cybersecurity culture in financial institutions: lessons in ...
Upgrading biometric authentication system protects customers in the Ph...
Mastercard introduces first-ever threat intelligence solution to comba...
Around 16.4m email accounts added to largest dataset of stolen credent...
LOGIN REGISTER
CybersecAsia
  • Features
    • Featured

      Embedding cybersecurity culture in financial institutions: lessons in leadership, collaboration, and cyber resilience

      Embedding cybersecurity culture in financial institutions: lessons in leadership, collaboration, and cyber resilience

      Thursday, October 30, 2025, 11:37 AM Asia/Singapore | Features, Newsletter
    • Featured

      Biometrics and the digital identity crisis today

      Biometrics and the digital identity crisis today

      Tuesday, October 28, 2025, 3:30 PM Asia/Singapore | Features
    • Featured

      Collaboration and data security for today’s agentic workspace

      Collaboration and data security for today’s agentic workspace

      Wednesday, October 22, 2025, 1:42 PM Asia/Singapore | Features, Tips
  • Opinions
  • Tips
  • Whitepapers
  • Awards 2025
  • Directory
  • E-Learning

Select Page

News

Cybercriminals spoof AI services to steal credentials, spread RATs

By CybersecAsia editors | Friday, May 23, 2025, 10:36 AM Asia/Singapore

Cybercriminals spoof AI services to steal credentials, spread RATs

Using fake ads, counterfeit websites, and malicious remote-access tool executables disguised as AI-generated output, cybercriminals waste no time exploiting popular platforms.

A major cyberattack campaign targeting users of the popular generative AI platform Kling AI has been uncovered by cyber threat researchers, highlighting the growing risks associated with the rapid adoption of AI tools.

Since early this year, threat actors have been observed to be leveraging the GenAI platform’s popularity to distribute malware through elaborate social engineering tactics.

The attack began with around 70 fraudulent Facebook ads and pages that closely mimicked Kling AI’s branding. Unsuspecting users who interacted with these ads were redirected to a counterfeit website designed to replicate the legitimate platform’s interface. From there, users were prompted to upload images or generate AI content, after which they were offered a download purportedly containing their requested media file.

However, the downloaded files, presented as harmless images or videos, were actually Windows executables disguised using filename masquerading techniques. Further, attackers obscured the files’ true nature by employing double extensions and UTF-8 encoded Hangul Filler characters, making them appear as standard media files even in file explorers.

Once executed, the malware established persistence on the victims’ devices, evaded security analysis, and deployed a second-stage payload: a remote access trojan (RAT) known as PureHVNC. This allowed attackers to remotely control infected devices, steal sensitive information, and maintain long-term access. The malware also targeted web browsers and extensions to harvest passwords and other personal data.

According to Check Point Research (CPR) analysts who disclosed their findings, evidence suggests links to Vietnamese threat actors, as similar campaigns have previously used Vietnamese-language code and Facebook-based malvertising tactics.

This incident underscores a broader trend: cybercriminals are increasingly exploiting the popular AI services as a vector for their sophisticated malware and social engineering schemes to compromise personal and organizational security. As AI adoption accelerates, the public will need remain vigilant against such deceptive campaigns, and verify the authenticity of platforms before downloading files or providing sensitive information.

Share:

PreviousAzentio unveils next-generation Amlock AML solution with advanced AI, smarter screening, and streamlined user experience
NextWhen AI crosses the line: landmark lawsuit set to challenge “chatbot free speech rights”

Related Posts

Singapore launches three initiatives to tackle the new global cyber landscape

Singapore launches three initiatives to tackle the new global cyber landscape

Friday, October 21, 2022

With great digital transformation comes a greater need for digital security training

With great digital transformation comes a greater need for digital security training

Tuesday, May 18, 2021

Skyrocketing identity theft and deepfake abuse: a sign of more to come?

Skyrocketing identity theft and deepfake abuse: a sign of more to come?

Friday, November 22, 2024

Two-factor authentication not as safe as people think: regional study

Two-factor authentication not as safe as people think: regional study

Wednesday, February 9, 2022

Leave a reply Cancel reply

You must be logged in to post a comment.

Voters-draw/RCA-Sponsors

Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
previous arrow
next arrow

CybersecAsia Voting Placement

Gamification listing or Participate Now

PARTICIPATE NOW

Vote Now -Placement(Google Ads)

Top-Sidebar-banner

Whitepapers

  • 2024 Insider Threat Report: Trends, Challenges, and Solutions

    2024 Insider Threat Report: Trends, Challenges, and Solutions

    Insider threats continue to be a major cybersecurity risk in 2024. Explore more insights on …Download Whitepaper
  • AI-Powered Cyber Ops: Redefining Cloud Security for 2025

    AI-Powered Cyber Ops: Redefining Cloud Security for 2025

    The future of cybersecurity is a perfect storm: AI-driven attacks, cloud expansion, and the convergence …Download Whitepaper
  • Data Management in the Age of Cloud and AI

    Data Management in the Age of Cloud and AI

    In today’s Asia Pacific business environment, organizations are leaning on hybrid multi-cloud infrastructures and advanced …Download Whitepaper
  • Mitigating Ransomware Risks with GRC Automation

    Mitigating Ransomware Risks with GRC Automation

    In today’s landscape, ransomware attacks pose significant threats to organizations of all sizes, with increasing …Download Whitepaper

Middle-sidebar-banner

Case Studies

  • Upgrading biometric authentication system protects customers in the Philippines: UnionDigital Bank

    Upgrading biometric authentication system protects customers in the Philippines: UnionDigital Bank

    An improved dual-liveness biometric framework can counter more deepfake threats, ensure compliance, and protect underbanked …Read more
  • HOSTWAY gains 73% operational efficiency for private cloud operations  

    HOSTWAY gains 73% operational efficiency for private cloud operations  

    With NetApp storage solutions, the Korean managed cloud service provider offers a lean, intelligent architecture, …Read more
  • CISOs can navigate emerging risks from autonomous AI with a new security framework

    CISOs can navigate emerging risks from autonomous AI with a new security framework

    See how security leaders can adopt layered strategies addressing intent, governance, and oversight to manage …Read more
  • MoneyMe strengthens fraud prevention and credit decisioning

    MoneyMe strengthens fraud prevention and credit decisioning

    Australian fintech strengthens risk management with SEON to scale lending operations securely and efficiently.Read more

Bottom sidebar

  • Our Brands
  • DigiconAsia
  • MartechAsia
  • Home
  • About Us
  • Contact Us
  • Sitemap
  • Privacy & Cookies
  • Terms of Use
  • Advertising & Reprint Policy
  • Media Kit
  • Subscribe
  • Manage Subscriptions
  • Newsletter

Copyright © 2025 CybersecAsia All Rights Reserved.