All recommendations within this article are informed by expert editorial opinion. If you click on a link in this story we may earn affiliate revenue.
FACEBOOK users are warned about infostealer pages that can infiltrate their devices.
Social media is a breeding ground for malicious activity, and cybercriminals are constantly looking for new ways to exploit unsuspecting users.
Recently, a research report by cybersecurity firm uncovered a large-scale scam targeting fans of artificial intelligence (AI) art generation.
The scheme involved a fake Facebook page masquerading as Midjourney, a popular AI art tool.
To date, this impostor page has garnered over a million Facebook followers.
Bitdefender believes that the hackers first found a popular page, then took it over and renamed it Midjourney.
Even though the page promoted AI art software, clicking the download link didn't grant access to the supposed tool.
Instead, it delivered a malicious payload, or malware designed to steal sensitive data.
Bitdefender's report details how this malware likely functioned as an infostealer program.
Infostealers are designed to gather personal information from infected devices.
This stolen data could include login credentials for online accounts, financial information, and even private messages.
Once collected, the data could be sold on the dark web or used directly for identity theft or financial fraud.
Midjourney is not the only AI tool hackers exploited – Sora AI, DALL-E 3, Evoto, and ChatGPT 5 are also targeted.
Below we share some expert-recommended tips on how to protect yourself from such scams.
Never click on download links from unverified sources, even on social media pages with a large following.
If you're interested in a particular software, always visit the official developer's website to download it.
Here's how to quit right now...
Temporarily deactivating your account is easy – and you can log back in at any time to undo it:
Facebook has a special page for permanent account deletion, which you can find below:
It’s worth noting that you can also download a copy of your information from Facebook as a backup:
Double-check page authenticity because social media platforms are filled with impostor accounts.
As such, before engaging with a page claiming to represent a particular brand or service, verify its legitimacy.
You can look for verification badges or compare the page name and URL with the official source.
It's also important to keep in mind that if an offer seems too good to be true, it probably is.
Be skeptical of software promising exceptional features, especially if it's heavily promoted on unofficial channels.
Having a robust security suite installed on your devices can help detect and block malware before it infects your system.
Consider solutions that offer real-time protection and URL filtering.
