gcdRadar
closedclosed 16 Oct 2024Breaches & attacks3 Confirmed exploitationAI

FIN7 Linked to Malware Distribution via Fake AI Nudify Websites

The FIN7 hacker group allegedly distributed infostealer malware through fake AI nudify websites luring deepfake seekers. The malware stole sensitive data from victims for financial fraud and extortion.

first report
2 Oct 2024
last update
2 Oct 2024

Timeline · 1

  1. 2 Oct 2024Fake AI 'Nudify' Sites Reportedly Linked to Malware Distribution by Russian Hacker Collective FIN7

Sources · 1

Research and catalogues

  1. 2024-10-02

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

AI role
AI-enabled attack
categories
AI phishing / social engineeringAI-generated malware
severity
3 · Confirmed exploitation
targets
Individuals
owasp llm top 10
no entry for these categories
dates
happened 2 Oct 2024 · first reported 2 Oct 2024
origin
AI Incident Database
Derived from the AI Incident Database (CC BY-SA 4.0).
record
confidence 0.85 · created 2026-10-18 06:33Z · updated 2026-10-18 06:59Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# FIN7 Linked to Malware Distribution via Fake AI Nudify Websites

https://gcdradar.vercel.app/incidents/fin7-linked-to-malware-distribution-via-fake-ai-nudify-websi · AIR-2024-0048 · closed 2024-10-16

- Lane: Breaches & attacks
- Severity: 3 (Confirmed exploitation)
- Fix status: No fix needed
- First reported: 2024-10-02
- AI role: AI-enabled attack

## Summary

The FIN7 hacker group allegedly distributed infostealer malware through fake AI nudify websites luring deepfake seekers. The malware stole sensitive data from victims for financial fraud and extortion.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2024-10-02: Fake AI 'Nudify' Sites Reportedly Linked to Malware Distribution by Russian Hacker Collective FIN7 (https://incidentdatabase.ai/cite/865)

## Sources

- 2024-10-02 AI Incident Database: Fake AI 'Nudify' Sites Reportedly Linked to Malware Distribution by Russian Hacker Collective FIN7 https://incidentdatabase.ai/cite/865

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. closed
    Claude Anthropic Identifies AI Misuse in Extortion and Ransomware Campaigns

    Breaches & attacks · Exploited · since 27 Aug 2025

    AI
  2. closed
    Claude Anthropic Report Reveals Claude Misuse in Cyberattacks and Fraud

    Breaches & attacks · Exploited · since 23 Apr 2025

    AI
  3. closed
    AI
  4. closed
    AI
  5. closed
    Scammers Target School Community Members with AI Voice Cloning Kidnapping Scam

    Breaches & attacks · Exploited · since 25 Sep 2024

    AI
  6. closed
    GPT-3.5 Underground Market for LLMs Powers Malware and Phishing Scams

    Breaches & attacks · Exploited · since 1 Dec 2023

    AI