FIN7 hackers launch deepfake nude “generator” sites to spread malware

FIN7 operated a network of fake AI "deepnude" sites promoted via black-hat SEO and malvertising to trick users into downloading archives that deployed information-stealing malware (notably Lumma Stealer, Redline Stealer, D3F@ck Loader) and other payloads such as NetSupport RAT; the campaign harvested browser credentials, cookies, and cryptocurrency wallets and is linked to FIN7's broader criminal activity including ties to ransomware groups.