ArcticRAT Android malware gang now uses AI to profile victims' finances
The ArcticRAT cybercrime group has expanded its Android malware from crypto theft to full device control. The attackers have added AI-based analysis of stolen data to profile victims' finances.
Criminals are using AI to pick the most valuable targets, so mobile banking users should be careful about app installs and permissions.
aii.news picks and summarizes stories from trusted news sources with the help of AI. Every story links to the original reporting. How we work.
Keep reading
-
Study finds ChatGPT, Gemini and Perplexity sometimes send shoppers to fake retail sites
IP protection firm Podqi asked the chatbots shopping questions about 151 brands and found they could point users to imposter and other risky websites. The test ran over two periods starting in September.
Why it mattersIf you use chatbots to find where to buy things, double-check the website address before entering payment details.
-
186 lookalike AI tool domains push ClickFix lures, browser malware and search hijackers
Researchers at Island found lookalike domains posing as popular AI tools that trick visitors into fake verification steps, install browser-hijacking malware or add extensions that hijack searches. The technique has been named TypoPrompting.
Why it mattersTyping an AI tool's address wrong can lead to malware, so bookmark the real sites and be wary of any page asking you to run commands.
-
United Airlines blocks customers from using AI agents to book and manage flights
United says it will not let personal AI assistants book tickets or manage reservations, warning that sharing account credentials with third-party agents can expose sensitive data and cause unintended purchases. It also cited federal rules on information airlines must give passengers.
Why it mattersCompanies are starting to restrict AI agents on their accounts, which may limit what consumer agents can do for you online.
-
FBI says North Korean hackers stole over $400 million in crypto using deepfake video calls
The FBI says hackers tied to North Korea stole more than $400 million in cryptocurrency over 18 months in a social engineering scheme codenamed FaceStealer that used deepfake video calls. The finding was part of a coordinated set of US government actions.
Why it mattersA familiar face on a video call is no longer proof of identity, so crypto firms and finance teams need extra checks before moving money.
-
OpenAI rolls out ChatGPT Wallet so AI agents can buy things without seeing your card number
OpenAI began rolling out ChatGPT Wallet, which lets its agents pay for purchases using a stand-in card number, so card details are not shared with the agent or the merchant. It was built with American Express, Mastercard and Visa, starts with US Pro subscribers, and requires biometric approval for each purchase.
Why it mattersLetting AI agents spend money for you is now a real product, so shoppers and merchants need to understand how approvals, tokenized cards and agent blocking will work.
