PULSE NAME
The Sting of Fake Kling: Facebook Malvertising Lures Victims to Fake AI Generation Website
WHITE CyberHunter_NL 2025-05-22 Modified: 2025-06-21
68
IOCs
HIGH VOLUME
In early 2025, Check Point Research (cp<r>) started tracking a threat campaign that abuses the growing popularity of AI content generation platforms by impersonating Kling AI, a legitimate AI-powered image and video synthesis tool. Promoted through Facebook advertisements, the campaign directs users to a convincing spoof of Kling AI’s website, where visitors are invited to create AI-generated images or videos directly in the browser.
Indicators of Compromise (68)
All domain hostname URL FileHash-MD5 FileHash-SHA1 FileHash-SHA256
TYPEINDICATORDESCRIPTIONCREATED
domain ai-kling.com 2025-05-22
domain kingaitext.com 2025-05-22
domain klings-ai.com 2025-05-22
domain klingx.ai 2025-05-22
domain klingxai.com 2025-05-22
hostname www.kling-ai.tech 2025-05-22
hostname www.klingai.cloud 2025-05-22
URL http://aikling.ai/Create_standard_mode_photo.zip 2025-05-22
URL http://klingturbo.com/images/ai-images/Image_Generation_158666.jpg 2025-05-22
domain aikling.ai 2025-05-22
domain klingturbo.com 2025-05-22
FileHash-MD5 29a6477b4ad97037bbce1df27e822e27 MD5 of 7035b5ba24146db537eedb1f05e6cad1775f9f5e81306f72422c03b288f75448 2025-05-22
FileHash-MD5 3881a73cc8558b2c6dc874f3bc7c5cbd MD5 of 732aa8ed8ca9a12f4bfc29a693ec3eba74ed1b2d00de4296180d91b86d09747b 2025-05-22
FileHash-MD5 3cee96215d2694759dda5674cd275354 MD5 of beeea592251a0a205b3bdb34802bd2f4f5181ee38226a05ec468a86be44e9508 2025-05-22
FileHash-MD5 3f2c4d26ae9cd23f7e22e8214c705e95 MD5 of 699e348260ae5b60cd822325f1c4bf2c793f6f25001357856c58520a9af10987 2025-05-22
FileHash-MD5 52a6f1dc6d6b357b33a7e840245832b5 MD5 of 5200b27726c0be8e6f34a3920fbd5d40aeaec460169b1f3c7a174ebeee6553d9 2025-05-22
FileHash-MD5 66d2d615671994f9d61e863901eac5c1 MD5 of f89298933fed52511bb78f8f377979190e37367d72ccf4f3b81374a70362cc42 2025-05-22
FileHash-MD5 6ef8bc398e8a1cef06b89f4001da26bc MD5 of 2588fdfa7417d617df2d31eddea710d0f964008abc2f4860cdff588ab9786d0a 2025-05-22
FileHash-MD5 787753160d79ca8dcd9742ddd198eb9a MD5 of d1b712b215612c8df5fef02b614c616a78b723bffbec6e10e32bfd0b758df41b 2025-05-22
FileHash-MD5 a5c7a3e1af9d646b9d9db34523c5af8e MD5 of 06d9d60ddbe835abc5b16911a35732cc9b56ea9425de210961a15d465823978f 2025-05-22
FileHash-MD5 c0c1111396c4530f2517cde108d1ce63 MD5 of 2d5e01cfacdf9f900b51b0539e0809f22ce1859eac0886866af35a2eb2dc2d42 2025-05-22
FileHash-MD5 f95fcb33d0ae6ed046ae627149561361 MD5 of 30e26f4fd7cb0ac626950bb01e01a2c02e277727d1d3ec94286a44af262f37cf 2025-05-22
FileHash-MD5 fda73d77c77e9b80b0f5f4aba68e6a1d MD5 of f5b31bd394e0a3adb6bd175207b8c3ccc51850c8f2cee1149a8421736168e13e 2025-05-22
FileHash-SHA1 0c074d5f3072888a97e2503fea633f804ee33c62 SHA1 of 5200b27726c0be8e6f34a3920fbd5d40aeaec460169b1f3c7a174ebeee6553d9 2025-05-22
FileHash-SHA1 2234e8cbbc834081c50d11d42fb18e3b51b93ea6 SHA1 of f89298933fed52511bb78f8f377979190e37367d72ccf4f3b81374a70362cc42 2025-05-22
FileHash-SHA1 271ac50c3c082238cc4f3815df75b5dd9f844c2c SHA1 of 7035b5ba24146db537eedb1f05e6cad1775f9f5e81306f72422c03b288f75448 2025-05-22
FileHash-SHA1 586107ab4b2c7f15cc6de27a79ec8fcf2de822e2 SHA1 of 699e348260ae5b60cd822325f1c4bf2c793f6f25001357856c58520a9af10987 2025-05-22
FileHash-SHA1 5898de761c9dce2370b1bd73f687ee08cc6dfb6f SHA1 of 732aa8ed8ca9a12f4bfc29a693ec3eba74ed1b2d00de4296180d91b86d09747b 2025-05-22
FileHash-SHA1 629d786f59e5c6481e0a439b0d0818b5ad2459db SHA1 of 30e26f4fd7cb0ac626950bb01e01a2c02e277727d1d3ec94286a44af262f37cf 2025-05-22
FileHash-SHA1 78acce2974629596f35686c8d975986d16a0fdfe SHA1 of 06d9d60ddbe835abc5b16911a35732cc9b56ea9425de210961a15d465823978f 2025-05-22
FileHash-SHA1 98ea24ec960ce5fe710032c5eaafaaf4cefb777f SHA1 of 2588fdfa7417d617df2d31eddea710d0f964008abc2f4860cdff588ab9786d0a 2025-05-22
FileHash-SHA1 a296727e8e17f5292c58f23d17ef55c16072841e SHA1 of f5b31bd394e0a3adb6bd175207b8c3ccc51850c8f2cee1149a8421736168e13e 2025-05-22
FileHash-SHA1 abf229dba0587851e0c3212d7df43763a7bda6fa SHA1 of d1b712b215612c8df5fef02b614c616a78b723bffbec6e10e32bfd0b758df41b 2025-05-22
FileHash-SHA1 cd0924b008e5c246ee37d960c41a37cb57cf1a90 SHA1 of beeea592251a0a205b3bdb34802bd2f4f5181ee38226a05ec468a86be44e9508 2025-05-22
FileHash-SHA1 d08f4bf3d45b6396fb30a8df0fef3875a414ed5a SHA1 of 2d5e01cfacdf9f900b51b0539e0809f22ce1859eac0886866af35a2eb2dc2d42 2025-05-22
FileHash-SHA256 06d9d60ddbe835abc5b16911a35732cc9b56ea9425de210961a15d465823978f 2025-05-22
FileHash-SHA256 2588fdfa7417d617df2d31eddea710d0f964008abc2f4860cdff588ab9786d0a 2025-05-22
FileHash-SHA256 2d5e01cfacdf9f900b51b0539e0809f22ce1859eac0886866af35a2eb2dc2d42 2025-05-22
FileHash-SHA256 30e26f4fd7cb0ac626950bb01e01a2c02e277727d1d3ec94286a44af262f37cf 2025-05-22
FileHash-SHA256 39d771c12bd5da15d3fb63905df1e2c4c7c12b8f77c630a35b247c418950eafe 2025-05-22
FileHash-SHA256 4bbaf3ececd53bc4028723e87b1669268a6fadc4d480590c2d59bb4322a17de7 2025-05-22
FileHash-SHA256 5200b27726c0be8e6f34a3920fbd5d40aeaec460169b1f3c7a174ebeee6553d9 2025-05-22
FileHash-SHA256 699e348260ae5b60cd822325f1c4bf2c793f6f25001357856c58520a9af10987 2025-05-22
FileHash-SHA256 7035b5ba24146db537eedb1f05e6cad1775f9f5e81306f72422c03b288f75448 2025-05-22
FileHash-SHA256 732aa8ed8ca9a12f4bfc29a693ec3eba74ed1b2d00de4296180d91b86d09747b 2025-05-22
FileHash-SHA256 beeea592251a0a205b3bdb34802bd2f4f5181ee38226a05ec468a86be44e9508 2025-05-22
FileHash-SHA256 d1b712b215612c8df5fef02b614c616a78b723bffbec6e10e32bfd0b758df41b 2025-05-22
FileHash-SHA256 d95b3eabfe9892371cb518fd6e733d2d33d2fabb2b1df4dab650a8f8e1ea8745 2025-05-22
FileHash-SHA256 f5b31bd394e0a3adb6bd175207b8c3ccc51850c8f2cee1149a8421736168e13e 2025-05-22
FileHash-SHA256 f89298933fed52511bb78f8f377979190e37367d72ccf4f3b81374a70362cc42 2025-05-22
FileHash-SHA256 0c9228983fbd928ac94c057a00d744d6be4bd4c1b39d1465b7d955b7d35bf496 2025-05-22
FileHash-SHA256 3fba4a0942244e9c3ad25a57a21f91b06f8732a2ca36da948ae5f0afa51dc72b 2025-05-22
FileHash-SHA256 557becfcc7eccaa5a7368a6d5583404af26aadede2c345d6070e6e9fab44a641 2025-05-22
FileHash-SHA256 839371cd5a5d66828ac9524182769371dede9606826ad7c22c3bb18fb2ee91cb 2025-05-22
FileHash-SHA256 9dab2badfdae86963b2f13ce8942fe78dd66ec497f8d82dd40c0cb5bec4fb2a7 2025-05-22
FileHash-SHA256 a5baceb97a2be17fdd0c282292ebb0b5a56a555013a4c8fffcc2335c504780fb 2025-05-22
FileHash-SHA256 b33e162a78b7b8e7dbbab5d1572d63814077fa524067ce79c37f52441b8bd384 2025-05-22
FileHash-SHA256 cee3f98b5f175219d025a92eddec4fd8bcaae31e6ad99321ae7c00b822063fc3 2025-05-22
FileHash-SHA256 1e66ebaef295c2a32245162979d167cebad1fece51b7cdb6a6c3a1d705befa6b 2025-05-22
domain kingaimediapro.com 2025-05-22
domain kingaiplus.com 2025-05-22
domain kingaivideotext.com 2025-05-22
domain klingaieditor.com 2025-05-22
domain klingaimedia.com 2025-05-22
domain klingaistudio.com 2025-05-22
URL https://www.facebook.com/61574162357787/ 2025-05-22
URL https://www.facebook.com/61574724896485/ 2025-05-22
URL https://www.facebook.com/people/KLING-AI/61574316153107/ 2025-05-22