概要: 偽のAI動画生成サイトを利用し、AI生成コンテンツを装ったマルウェアを拡散するキャンペーンが報告されています。ソーシャルメディアを通じて宣伝されたこれらのサイトは、ユーザーを騙して、これまで報告されていない情報窃盗マルウェア「Noodlophile Stealer」や、場合によってはXWormを含むファイルをダウンロードさせようとしていました。これらのマルウェアは認証情報を収集し、リモートアクセスを可能にする可能性がありました。
Editor Notes: Reportedly fake AI video generator sites (e.g. "Dream Machine") began circulating in early 2025 via Facebook groups and social media lures. Victims were allegedly prompted to upload media and download processed content, which instead delivered malware (Noodlophile Stealer, sometimes XWorm). Morphisec publicly reported the campaign and newly named stealer on 05/08/2025. The full Morphisec threat analysis report can be read at the following URL: https://engage.morphisec.com/hubfs/Noodlophile_Ransomware_ThreatAnalysis.pdf.
Alleged: Unknown developer of Noodlophile Stealer developed an AI system deployed by Unknown developer of Noodlophile Stealer , Unknown actors operating fraudulent AI-themed websites と Unknown actors distributing malware-as-a-service (MaaS), which harmed Users whose devices were potentially compromised via remote access trojans (RATs) , Targets of credential theft , Small businesses targeted by Noodlophile Stealer と Individuals targeted by Noodlophile Stealer.
関与が疑われるAIシステム: zlib , XWorm , WinRAR CLI utility , Windows Registry , Windows , Telegram , RegAsm.exe , Python marshal , PowerShell , Luma Dreammachine , Google , Fake AI content generation platforms , Facebook , Dream Machine , cpython environment , certutil.exe , CapCut , base85 と .NET runtime hosting APIs
インシデントのステータス
Risk Subdomain
A further 23 subdomains create an accessible and understandable classification of hazards and harms associated with AI
4.3. Fraud, scams, and targeted manipulation
Risk Domain
The Domain Taxonomy of AI Risks classifies risks into seven AI risk domains: (1) Discrimination & toxicity, (2) Privacy & security, (3) Misinformation, (4) Malicious actors & misuse, (5) Human-computer interaction, (6) Socioeconomic & environmental harms, and (7) AI system safety, failures & limitations.
- Malicious Actors & Misuse
Entity
Which, if any, entity is presented as the main cause of the risk
Human
Timing
The stage in the AI lifecycle at which the risk is presented as occurring
Post-deployment
Intent
Whether the risk is presented as occurring as an expected or unexpected outcome from pursuing a goal
Intentional