Fake AI video generator tools lure in Facebook and LinkedIn users to deliver malware

Cybercriminals are running a large malvertising campaign that advertises fake AI text-to-video generators to trick users into downloading executables; a Rust dropper called Starkveil (which requires being run twice) deploys XWorm and Frostrift backdoors plus the GRIMPULL downloader to harvest and exfiltrate data. The operation uses thousands of ads, rotating domains, and compromised/created accounts across social platforms to evade detection; users should avoid unofficial AI tools, scrutinize ads/URLs, and run up-to-date protections.