PULSE NAME
The Sting of Fake Kling: Facebook Malvertising Lures Victims to Fake AI Generation Website
WHITE CyberHunter_NL 2025-05-22 Modified: 2025-06-21
68
IOCs
HIGH VOLUME
In early 2025, Check Point Research (cp<r>) started tracking a threat campaign that abuses the growing popularity of AI content generation platforms by impersonating Kling AI, a legitimate AI-powered image and video synthesis tool. Promoted through Facebook advertisements, the campaign directs users to a convincing spoof of Kling AI’s website, where visitors are invited to create AI-generated images or videos directly in the browser.
Indicators of Compromise (12 / 68 total)
All domain hostname URL FileHash-MD5 FileHash-SHA1 FileHash-SHA256
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 29a6477b4ad97037bbce1df27e822e27 MD5 of 7035b5ba24146db537eedb1f05e6cad1775f9f5e81306f72422c03b288f75448 2025-05-22
FileHash-MD5 3881a73cc8558b2c6dc874f3bc7c5cbd MD5 of 732aa8ed8ca9a12f4bfc29a693ec3eba74ed1b2d00de4296180d91b86d09747b 2025-05-22
FileHash-MD5 3cee96215d2694759dda5674cd275354 MD5 of beeea592251a0a205b3bdb34802bd2f4f5181ee38226a05ec468a86be44e9508 2025-05-22
FileHash-MD5 3f2c4d26ae9cd23f7e22e8214c705e95 MD5 of 699e348260ae5b60cd822325f1c4bf2c793f6f25001357856c58520a9af10987 2025-05-22
FileHash-MD5 52a6f1dc6d6b357b33a7e840245832b5 MD5 of 5200b27726c0be8e6f34a3920fbd5d40aeaec460169b1f3c7a174ebeee6553d9 2025-05-22
FileHash-MD5 66d2d615671994f9d61e863901eac5c1 MD5 of f89298933fed52511bb78f8f377979190e37367d72ccf4f3b81374a70362cc42 2025-05-22
FileHash-MD5 6ef8bc398e8a1cef06b89f4001da26bc MD5 of 2588fdfa7417d617df2d31eddea710d0f964008abc2f4860cdff588ab9786d0a 2025-05-22
FileHash-MD5 787753160d79ca8dcd9742ddd198eb9a MD5 of d1b712b215612c8df5fef02b614c616a78b723bffbec6e10e32bfd0b758df41b 2025-05-22
FileHash-MD5 a5c7a3e1af9d646b9d9db34523c5af8e MD5 of 06d9d60ddbe835abc5b16911a35732cc9b56ea9425de210961a15d465823978f 2025-05-22
FileHash-MD5 c0c1111396c4530f2517cde108d1ce63 MD5 of 2d5e01cfacdf9f900b51b0539e0809f22ce1859eac0886866af35a2eb2dc2d42 2025-05-22
FileHash-MD5 f95fcb33d0ae6ed046ae627149561361 MD5 of 30e26f4fd7cb0ac626950bb01e01a2c02e277727d1d3ec94286a44af262f37cf 2025-05-22
FileHash-MD5 fda73d77c77e9b80b0f5f4aba68e6a1d MD5 of f5b31bd394e0a3adb6bd175207b8c3ccc51850c8f2cee1149a8421736168e13e 2025-05-22