“AI has spurred broad interest across all audiences, from cybercriminals looking to perfect their scams to everyday consumers interested in learning more and hacking their productivity with new AI-powered tools,” Pieter Arntz, a Malwarebytes intelligence researcher, told CSO in an email. “This onslaught of interest has sparked a flurry of AI-related scams, and I don’t see them stopping anytime soon. 

“Most cybercriminals are focused on making money, and they’ll take advantage of any new cultural moment to dupe users. I’ve seen scams ranging from a free trial with a very shoddy product to straight-out malware downloads. I caution people to be wary of new, free tools and to use a browser extension that blocks malware and phishing.”

According to Malpedia, Lumma Stealer (also known as LummaC2Stealer) is an information stealer available through a malware-as-a-service model on Russian-speaking criminal forums since at least August, 2022. It primarily targets cryptocurrency wallets and two-factor authentication browser extensions, before ultimately stealing sensitive information from the victim’s machine. Once the targeted data is obtained, Malpedia notes, it is exfiltrated to a C2 (command and control) server via HTTP POST requests using the user agent “TeslaBrowser/5.5″.” The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.