AI Voice Generator App Used to Drop Gipy Malware

Kaspersky researchers uncovered the Gipy campaign (first seen in early 2023) that lures victims in Germany, Russia, Spain, and Taiwan with a fake AI voice-changing app; the app installs an infostealer that also delivers password-protected GitHub archives containing numerous malware families (Lumma, RedLine, RisePro, Loli, Apocalypse ClipBanker, Corona cryptominer, DCRat, RADXRat, TrueClient) enabling credential theft, cryptomining, and backdoor access.