HP Inc has warned of an increase in cyber attacks that exploit interest in artificial intelligence tools and use QR codes to deceive users and download malware. The company, listed on the New York Stock Exchange under the symbol HPQ, has released its latest report on cybersecurity threats. The report analyzes real-life attacks to monitor the methods used by cybercriminals to bypass detection tools and hack into computers.
The report reveals the growing use of fake trading agents supported by AI to lure cryptocurrency users into downloading malware. Cybercriminals exploit the increasing interest in AI systems to promote trading tools that appear legitimate. The malware downloaded through these campaigns searches users' browsers for cryptocurrency wallet add-ons, such as Coinbase and MetaMask, and replaces them with malicious copies.
Once cybercriminals obtain these credentials, they can access cryptocurrency balances and steal them, increasing the risks of AI exploitation in targeted attacks on digital asset users. The report also notes the continued use of phishing via QR codes as a means of stealing credentials. This involves sending PDF files to victims containing content allegedly "blocked for security reasons" and asking them to scan a QR code using their phones.
The report highlights the expansion of the Phantom Stealer system through the Phantom Gate tool, a new malware downloader that helps expand the scope of the Phantom Stealer campaign. The combination of Phantom Stealer malware and Phantom Gate allows threat actors to build and expand their attack campaigns more easily.
Patrick Schlapfer, principal researcher of threats at HP Labs, states that attackers are exploiting the growing spread of AI tools to develop new methods to trick users into downloading malware that appears legitimate. This style makes malware delivery more professional and harder to detect.
James Wright, global head of personal system security solutions at HP, notes that users are constantly moving between devices and applications, including browsers and new AI tools, while attackers are quick to keep pace with this movement. He emphasizes that security protection must provide comprehensive coverage for these interactions without impacting the user experience.
HP Wolf Security relies on isolating threats that succeed in bypassing detection tools on computers while allowing malicious software to run in safe and isolated environments. This provides a broader view of the latest methods used by cybercriminals. HP states that HP Wolf Security customers have interacted with 60 billion email attachments and downloaded files and web pages without reporting any breaches.
Key points
- HP warns of rising cyber attacks using AI and QR codes to steal cryptocurrency.
- Fake trading agents supported by AI are used to lure users into downloading malware.
- HP Wolf Security isolates threats and provides comprehensive coverage for user interactions.
