Mexico cyber police alert on AI-generated videos distributing malware
Mexico's cyber police warned the public about AI-generated videos containing malicious links and infected attachments being used to distribute malware. Scammers create fraudulent platforms mimicking AI tools on social media, tricking users into downloading files that install credential-stealing malware and remote-access trojans.
What happened
The Cyber Police Unit of Mexico City's Secretaría de Seguridad Ciudadana (SSC) alerted the public about AI-generated videos containing malicious links, infected attachments, or prompts to download fraudulent applications.
Cybercriminals created fake platforms designed to distribute malware, using deceptive advertisements on social media and online groups to attract users seeking AI productivity tools. Users are tricked into uploading multimedia files with promises of AI-powered processing; instead of receiving processed content, they download a compressed file containing malware that installs Noodlophile and XWorm.
Noodlophile is malicious software specialized in stealing credentials stored in web browsers and cryptocurrency digital wallets. XWorm is a trojan that allows attackers to remotely manipulate the infected device to steal sensitive information or accounts.
Reported impact
The alert warns internet users about the threat posed by AI-generated videos used to distribute malware in Mexico City.
Governance controls
The SSC Cyber Police Unit recommended downloading AI tools only from official and trusted sources, becoming informed about risks of unverified software, implementing updated antivirus and malware detection tools, analyzing app permissions before installation, and avoiding platforms promising advanced results at no cost or without prior registration.
Classification
Sources and evidence
Sources not yet published
This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.