{"id":5427,"date":"2024-06-17T19:15:01","date_gmt":"2024-06-18T01:15:01","guid":{"rendered":"https:\/\/priegobrito.mx\/?p=5427"},"modified":"2024-06-17T19:15:01","modified_gmt":"2024-06-18T01:15:01","slug":"gipy-alert-malware-disguised-as-artificial-intelligence-app-to-steal-passwords","status":"publish","type":"post","link":"https:\/\/priegobrito.mx\/en\/blog\/2024\/06\/alerta-por-gipy-malware-se-disfraza-de-app-de-inteligencia-artificial-para-robar-contrasenas\/","title":{"rendered":"Gipy alert! Malware disguises itself as artificial intelligence app to steal passwords"},"content":{"rendered":"

Gipy can steal user passwords.<\/p>\n

Kaspersky discovered a new malware campaign called Gipy that exploits artificial intelligence (AI) tools to steal passwords. According to the cybersecurity firm, this malware masquerades as a voice modifier.<\/p>\n

How does Gipy malware disguise itself to steal user passwords?<\/p>\n

The malware uses GitHub, a popular platform dedicated to programmers for storing password-protected files as the payload.<\/p>\n

The Gipy malware has been active since mid-2023 and distinguishes itself by choosing AI tools as bait to spread malicious files.<\/p>\n

The infection occurs when the user downloads a malicious file from a phishing website that mimics an AI application used to change voices.<\/p>\n

After the user clicks the \u201cInstall\u201c button, the installer of a legitimate application starts; however, a script executes malicious activities in the background.<\/p>\n

During its execution, Gipy downloads and launches third-party malware from GitHub packaged in password-protected ZIP archives.<\/p>\n

Important points to consider:<\/p>\n