Fake AI editor ads on Facebook push password-stealing malware

A Facebook malvertising campaign impersonates popular AI image-editing services to trick page owners and users into installing a fake application; the installer launches a downloader that deploys Lumma Stealer, enabling attackers to hijack pages, run paid promotions of malicious posts, and exfiltrate credentials, browser data, and cryptocurrency wallet files.