← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
IOC - The Sting of Fake Kling: Facebook Malvertising Lures Victims to Fake AI Generation Website
WHITE celestre 2025-05-22 Modified: 2025-06-20
53
IOCs
HIGH VOLUME
purehvncinfostealercrypto theftmalvertisingfacebook ads
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
PureHVNC
Indicators of Compromise (53)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 domain hostname
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 29a6477b4ad97037bbce1df27e822e27 — 2025-05-22
FileHash-MD5 3cee96215d2694759dda5674cd275354 — 2025-05-22
FileHash-MD5 52a6f1dc6d6b357b33a7e840245832b5 — 2025-05-22
FileHash-MD5 66d2d615671994f9d61e863901eac5c1 — 2025-05-22
FileHash-MD5 a5c7a3e1af9d646b9d9db34523c5af8e — 2025-05-22
FileHash-MD5 f95fcb33d0ae6ed046ae627149561361 — 2025-05-22
FileHash-MD5 fda73d77c77e9b80b0f5f4aba68e6a1d — 2025-05-22
FileHash-SHA1 0c074d5f3072888a97e2503fea633f804ee33c62 — 2025-05-22
FileHash-SHA1 2234e8cbbc834081c50d11d42fb18e3b51b93ea6 — 2025-05-22
FileHash-SHA1 271ac50c3c082238cc4f3815df75b5dd9f844c2c — 2025-05-22
FileHash-SHA1 629d786f59e5c6481e0a439b0d0818b5ad2459db — 2025-05-22
FileHash-SHA1 78acce2974629596f35686c8d975986d16a0fdfe — 2025-05-22
FileHash-SHA1 a296727e8e17f5292c58f23d17ef55c16072841e — 2025-05-22
FileHash-SHA1 cd0924b008e5c246ee37d960c41a37cb57cf1a90 — 2025-05-22
FileHash-SHA256 06d9d60ddbe835abc5b16911a35732cc9b56ea9425de210961a15d465823978f — 2025-05-22
FileHash-SHA256 0c9228983fbd928ac94c057a00d744d6be4bd4c1b39d1465b7d955b7d35bf496 — 2025-05-22
FileHash-SHA256 1e66ebaef295c2a32245162979d167cebad1fece51b7cdb6a6c3a1d705befa6b — 2025-05-22
FileHash-SHA256 2588fdfa7417d617df2d31eddea710d0f964008abc2f4860cdff588ab9786d0a — 2025-05-22
FileHash-SHA256 2d5e01cfacdf9f900b51b0539e0809f22ce1859eac0886866af35a2eb2dc2d42 — 2025-05-22
FileHash-SHA256 30e26f4fd7cb0ac626950bb01e01a2c02e277727d1d3ec94286a44af262f37cf — 2025-05-22
FileHash-SHA256 39d771c12bd5da15d3fb63905df1e2c4c7c12b8f77c630a35b247c418950eafe — 2025-05-22
FileHash-SHA256 3fba4a0942244e9c3ad25a57a21f91b06f8732a2ca36da948ae5f0afa51dc72b — 2025-05-22
FileHash-SHA256 4bbaf3ececd53bc4028723e87b1669268a6fadc4d480590c2d59bb4322a17de7 — 2025-05-22
FileHash-SHA256 5200b27726c0be8e6f34a3920fbd5d40aeaec460169b1f3c7a174ebeee6553d9 — 2025-05-22
FileHash-SHA256 557becfcc7eccaa5a7368a6d5583404af26aadede2c345d6070e6e9fab44a641 — 2025-05-22
FileHash-SHA256 699e348260ae5b60cd822325f1c4bf2c793f6f25001357856c58520a9af10987 — 2025-05-22
FileHash-SHA256 7035b5ba24146db537eedb1f05e6cad1775f9f5e81306f72422c03b288f75448 — 2025-05-22
FileHash-SHA256 732aa8ed8ca9a12f4bfc29a693ec3eba74ed1b2d00de4296180d91b86d09747b — 2025-05-22
FileHash-SHA256 839371cd5a5d66828ac9524182769371dede9606826ad7c22c3bb18fb2ee91cb — 2025-05-22
FileHash-SHA256 9dab2badfdae86963b2f13ce8942fe78dd66ec497f8d82dd40c0cb5bec4fb2a7 — 2025-05-22
FileHash-SHA256 a5baceb97a2be17fdd0c282292ebb0b5a56a555013a4c8fffcc2335c504780fb — 2025-05-22
FileHash-SHA256 b33e162a78b7b8e7dbbab5d1572d63814077fa524067ce79c37f52441b8bd384 — 2025-05-22
FileHash-SHA256 beeea592251a0a205b3bdb34802bd2f4f5181ee38226a05ec468a86be44e9508 — 2025-05-22
FileHash-SHA256 cee3f98b5f175219d025a92eddec4fd8bcaae31e6ad99321ae7c00b822063fc3 — 2025-05-22
FileHash-SHA256 d1b712b215612c8df5fef02b614c616a78b723bffbec6e10e32bfd0b758df41b — 2025-05-22
FileHash-SHA256 d95b3eabfe9892371cb518fd6e733d2d33d2fabb2b1df4dab650a8f8e1ea8745 — 2025-05-22
FileHash-SHA256 f5b31bd394e0a3adb6bd175207b8c3ccc51850c8f2cee1149a8421736168e13e — 2025-05-22
FileHash-SHA256 f89298933fed52511bb78f8f377979190e37367d72ccf4f3b81374a70362cc42 — 2025-05-22
domain ai-kling.com — 2025-05-22
domain aikling.ai — 2025-05-22
domain kingaimediapro.com — 2025-05-22
domain kingaiplus.com — 2025-05-22
domain kingaitext.com — 2025-05-22
domain kingaivideotext.com — 2025-05-22
domain klingaieditor.com — 2025-05-22
domain klingaimedia.com — 2025-05-22
domain klingaistudio.com — 2025-05-22
domain klings-ai.com — 2025-05-22
domain klingturbo.com — 2025-05-22
domain klingx.ai — 2025-05-22
domain klingxai.com — 2025-05-22
hostname www.kling-ai.tech — 2025-05-22
hostname www.klingai.cloud — 2025-05-22
References (2)
↗ ↗ https://research.checkpoint.com/2025/impersonated-kling-ai-site-installs-malware/