Executive Summary
Check Point found a crypto clipper campaign using promoted news posts, fake reviews, AI narrators and VirusTotal comments to push malware.
What Happened
An unknown threat actor has been observed leveraging paid or promoted posts on legitimate news websites to drum up buzz for their warez, according to new findings from Check Point Research. The threat actor also has at their disposal a dedicated WordPress phishing page that acts as the central hub, alongside GitHub and SourceForge projects promoted by fake accounts, a YouTube channel, and a
Vulnerability / Attack Technique
AI-assisted promotion of malware
Technical Mechanism
AI-voiced videos and fake reviews build trust.
AI Security Category
AI-assisted attack
Part of the AI-Assisted Attacks topic.
RealGround Analysis
AI makes fake legitimacy cheap.
Recommended Controls
- Download software from official sites
Related RealGround Service
AI Red Teaming · or start with the free AI Agent Security Scanner.
Sources
thehackernews.com: https://thehackernews.com/2026/06/crypto-clipper-campaign-abuses-fake.html
Summary and analysis written by RealGround from the source above; last updated 2026-10-18.