CINXE.COM

<!doctype html> <html lang="en"> <meta name='robots' content='index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1' /> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="profile" href="https://gmpg.org/xfn/11"> <link rel="preconnect" href="https://fonts.googleapis.com"> <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>  <title>Free AI editor lures in victims, installs information stealer instead on Windows and Mac | Malwarebytes</title> <meta name="description" content="A widespread social media campaign for EditProAI turns out to spread information stealers for both Windows and MacOS users." /> <link rel="canonical" href="https://www.malwarebytes.com/blog/news/2024/11/free-ai-editor-lures-in-victims-installs-information-stealer-instead-on-windows-and-mac" /> <meta property="og:type" content="article" /> <meta property="og:title" content="Free AI editor lures in victims, installs information stealer instead on Windows and Mac | Malwarebytes" /> <meta property="og:description" content="A widespread social media campaign for EditProAI turns out to spread information stealers for both Windows and MacOS users." /> <meta property="og:url" content="https://www.malwarebytes.com/blog/news/2024/11/free-ai-editor-lures-in-victims-installs-information-stealer-instead-on-windows-and-mac" /> <meta property="og:site_name" content="Malwarebytes" /> <meta property="article:publisher" content="https://www.facebook.com/Malwarebytes" /> <meta property="article:published_time" content="2024-11-19T14:51:08+00:00" /> <meta property="article:modified_time" content="2024-11-19T14:51:10+00:00" /> <meta property="og:image" content="https://www.malwarebytes.com/wp-content/uploads/sites/2/2024/11/header_image_EditProAI.jpg" /> <meta property="og:image:width" content="1200" /> <meta property="og:image:height" content="675" /> <meta property="og:image:type" content="image/jpeg" /> <meta name="author" content="Pieter Arntz" /> <meta name="twitter:card" content="summary_large_image" /> <meta name="twitter:title" content="Free AI editor lures in victims, installs information stealer instead on Windows and Mac | Malwarebytes" /> <meta name="twitter:description" content="A widespread social media campaign for EditProAI turns out to spread information stealers for both Windows and MacOS users." /> <meta name="twitter:image" content="https://www.malwarebytes.com/wp-content/uploads/sites/2/2024/11/header_image_EditProAI.jpg" /> <meta name="twitter:creator" content="@MetallicaMVP" /> <meta name="twitter:site" content="@malwarebytes" /> <meta name="twitter:label1" content="Written by" /> <meta name="twitter:data1" content="Pieter Arntz" /> <meta name="twitter:label2" content="Est. reading time" /> <meta name="twitter:data2" content="4 minutes" /> <script type="application/ld+json" class="yoast-schema-graph">{"@context":"https://schema.org","@graph":[{"@type":"Article","@id":"https://www.malwarebytes.com/blog/news/2024/11/free-ai-editor-lures-in-victims-installs-information-stealer-instead-on-windows-and-mac#article","isPartOf":{"@id":"https://www.malwarebytes.com/blog/news/2024/11/free-ai-editor-lures-in-victims-installs-information-stealer-instead-on-windows-and-mac"},"author":{"name":"Pieter Arntz","@id":"https://www.malwarebytes.com/#/schema/person/2b1ed802a880b748f82ee9b3db911ab4"},"headline":"Free AI editor lures in victims, installs information stealer instead on Windows and Mac","datePublished":"2024-11-19T14:51:08+00:00","dateModified":"2024-11-19T14:51:10+00:00","mainEntityOfPage":{"@id":"https://www.malwarebytes.com/blog/news/2024/11/free-ai-editor-lures-in-victims-installs-information-stealer-instead-on-windows-and-mac"},"wordCount":475,"publisher":{"@id":"https://www.malwarebytes.com/#organization"},"image":{"@id":"https://www.malwarebytes.com/blog/news/2024/11/free-ai-editor-lures-in-victims-installs-information-stealer-instead-on-windows-and-mac#primaryimage"},"thumbnailUrl":"https://www.malwarebytes.com/wp-content/uploads/sites/2/2024/11/header_image_EditProAI.jpg","keywords":["amos","Atomic stealer","EditProAI","information stealers","lumma"],"articleSection":["Apple","News","Threats"],"inLanguage":"en"},{"@type":"WebPage","@id":"https://www.malwarebytes.com/blog/news/2024/11/free-ai-editor-lures-in-victims-installs-information-stealer-instead-on-windows-and-mac","url":"https://www.malwarebytes.com/blog/news/2024/11/free-ai-editor-lures-in-victims-installs-information-stealer-instead-on-windows-and-mac","name":"Free AI editor lures in victims, installs information stealer instead on Windows and Mac | Malwarebytes","isPartOf":{"@id":"https://www.malwarebytes.com/#website"},"primaryImageOfPage":{"@id":"https://www.malwarebytes.com/blog/news/2024/11/free-ai-editor-lures-in-victims-installs-information-stealer-instead-on-windows-and-mac#primaryimage"},"image":{"@id":"https://www.malwarebytes.com/blog/news/2024/11/free-ai-editor-lures-in-victims-installs-information-stealer-instead-on-windows-and-mac#primaryimage"},"thumbnailUrl":"https://www.malwarebytes.com/wp-content/uploads/sites/2/2024/11/header_image_EditProAI.jpg","datePublished":"2024-11-19T14:51:08+00:00","dateModified":"2024-11-19T14:51:10+00:00","description":"A widespread social media campaign for EditProAI turns out to spread information stealers for both Windows and MacOS users.","breadcrumb":{"@id":"https://www.malwarebytes.com/blog/news/2024/11/free-ai-editor-lures-in-victims-installs-information-stealer-instead-on-windows-and-mac#breadcrumb"},"inLanguage":"en","potentialAction":[{"@type":"ReadAction","target":["https://www.malwarebytes.com/blog/news/2024/11/free-ai-editor-lures-in-victims-installs-information-stealer-instead-on-windows-and-mac"]}]},{"@type":"ImageObject","inLanguage":"en","@id":"https://www.malwarebytes.com/blog/news/2024/11/free-ai-editor-lures-in-victims-installs-information-stealer-instead-on-windows-and-mac#primaryimage","url":"https://www.malwarebytes.com/wp-content/uploads/sites/2/2024/11/header_image_EditProAI.jpg","contentUrl":"https://www.malwarebytes.com/wp-content/uploads/sites/2/2024/11/header_image_EditProAI.jpg","width":1200,"height":675,"caption":"EditProAI website"},{"@type":"BreadcrumbList","@id":"https://www.malwarebytes.com/blog/news/2024/11/free-ai-editor-lures-in-victims-installs-information-stealer-instead-on-windows-and-mac#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.malwarebytes.com/"},{"@type":"ListItem","position":2,"name":"Free AI editor lures in victims, installs information stealer instead on Windows and Mac"}]},{"@type":"WebSite","@id":"https://www.malwarebytes.com/#website","url":"https://www.malwarebytes.com/","name":"Malwarebytes","description":"Cyber Security Software & Anti-Malware","publisher":{"@id":"https://www.malwarebytes.com/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://www.malwarebytes.com/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en"},{"@type":"Organization","@id":"https://www.malwarebytes.com/#organization","name":"Malwarebytes","url":"https://www.malwarebytes.com/","logo":{"@type":"ImageObject","inLanguage":"en","@id":"https://www.malwarebytes.com/#/schema/logo/image/","url":"https://www.malwarebytes.com/wp-content/uploads/sites/2/2023/11/Malwarebytes-logo.png","contentUrl":"https://www.malwarebytes.com/wp-content/uploads/sites/2/2023/11/Malwarebytes-logo.png","width":1200,"height":675,"caption":"Malwarebytes"},"image":{"@id":"https://www.malwarebytes.com/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/Malwarebytes","https://x.com/malwarebytes","https://www.linkedin.com/company/malwarebytes","https://www.youtube.com/user/Malwarebytes","https://www.instagram.com/malwarebytesofficial"]},{"@type":"Person","@id":"https://www.malwarebytes.com/#/schema/person/2b1ed802a880b748f82ee9b3db911ab4","name":"Pieter Arntz","image":{"@type":"ImageObject","inLanguage":"en","@id":"https://www.malwarebytes.com/#/schema/person/image/","url":"https://secure.gravatar.com/avatar/f33e2d8a1e33f47f8d85f1ebd074fdeb?s=96&d=mm&r=g","contentUrl":"https://secure.gravatar.com/avatar/f33e2d8a1e33f47f8d85f1ebd074fdeb?s=96&d=mm&r=g","caption":"Pieter Arntz"},"description":"Was a Microsoft MVP in consumer security for 12 years running. Can speak four languages. Smells of rich mahogany and leather-bound books.","sameAs":["https://x.com/MetallicaMVP"],"jobTitle":"Malware Intelligence Researcher","url":"https://www.malwarebytes.com/blog/authors/metallicamvp"}]}</script> <meta name="googlebot" content="index, follow" />  <link rel='dns-prefetch' href='//stats.wp.com' />  <link rel="preconnect" href="https://dev.visualwebsiteoptimizer.com" /> <script type='text/javascript' id='vwoCode'> window._vwo_code || (function() { var account_id=622914, version=2.1, settings_tolerance=5000, hide_element='body', hide_element_style = 'opacity:0 !important;filter:alpha(opacity=0) !important;background:none !important;transition:none !important;', /* DO NOT EDIT BELOW THIS LINE */ f=false,w=window,d=document,v=d.querySelector('#vwoCode'),cK='_vwo_'+account_id+'_settings',cc={};try{var c=JSON.parse(localStorage.getItem('_vwo_'+account_id+'_config'));cc=c&&typeof c==='object'?c:{}}catch(e){}var stT=cc.stT==='session'?w.sessionStorage:w.localStorage;code={nonce:v&&v.nonce,use_existing_jquery:function(){return typeof use_existing_jquery!=='undefined'?use_existing_jquery:undefined},library_tolerance:function(){return typeof library_tolerance!=='undefined'?library_tolerance:undefined},settings_tolerance:function(){return cc.sT||settings_tolerance},hide_element_style:function(){return'{'+(cc.hES||hide_element_style)+'}'},hide_element:function(){if(performance.getEntriesByName('first-contentful-paint')[0]){return''}return typeof cc.hE==='string'?cc.hE:hide_element},getVersion:function(){return version},finish:function(e){if(!f){f=true;var t=d.getElementById('_vis_opt_path_hides');if(t)t.parentNode.removeChild(t);if(e)(new Image).src='https://dev.visualwebsiteoptimizer.com/ee.gif?a='+account_id+e}},finished:function(){return f},addScript:function(e){var t=d.createElement('script');t.type='text/javascript';if(e.src){t.src=e.src}else{t.text=e.text}v&&t.setAttribute('nonce',v.nonce);d.getElementsByTagName('head')[0].appendChild(t)},load:function(e,t){var n=this.getSettings(),i=d.createElement('script'),r=this;t=t||{};if(n){i.textContent=n;d.getElementsByTagName('head')[0].appendChild(i);if(!w.VWO||VWO.caE){stT.removeItem(cK);r.load(e)}}else{var o=new XMLHttpRequest;o.open('GET',e,true);o.withCredentials=!t.dSC;o.responseType=t.responseType||'text';o.onload=function(){if(t.onloadCb){return t.onloadCb(o,e)}if(o.status===200||o.status===304){_vwo_code.addScript({text:o.responseText})}else{_vwo_code.finish('&e=loading_failure:'+e)}};o.onerror=function(){if(t.onerrorCb){return t.onerrorCb(e)}_vwo_code.finish('&e=loading_failure:'+e)};o.send()}},getSettings:function(){try{var e=stT.getItem(cK);if(!e){return}e=JSON.parse(e);if(Date.now()>e.e){stT.removeItem(cK);return}return e.s}catch(e){return}},init:function(){if(d.URL.indexOf('__vwo_disable__')>-1)return;var e=this.settings_tolerance();w._vwo_settings_timer=setTimeout(function(){_vwo_code.finish();stT.removeItem(cK)},e);var t;if(this.hide_element()!=='body'){t=d.createElement('style');var n=this.hide_element(),i=n?n+this.hide_element_style():'',r=d.getElementsByTagName('head')[0];t.setAttribute('id','_vis_opt_path_hides');v&&t.setAttribute('nonce',v.nonce);t.setAttribute('type','text/css');if(t.styleSheet)t.styleSheet.cssText=i;else t.appendChild(d.createTextNode(i));r.appendChild(t)}else{t=d.getElementsByTagName('head')[0];var i=d.createElement('div');i.style.cssText='z-index: 2147483647 !important;position: fixed !important;left: 0 !important;top: 0 !important;width: 100% !important;height: 100% !important;background: white !important;';i.setAttribute('id','_vis_opt_path_hides');i.classList.add('_vis_hide_layer');t.parentNode.insertBefore(i,t.nextSibling)}var o=window._vis_opt_url||d.URL,s='https://dev.visualwebsiteoptimizer.com/j.php?a='+account_id+'&u='+encodeURIComponent(o)+'&vn='+version;if(w.location.search.indexOf('_vwo_xhr')!==-1){this.addScript({src:s})}else{this.load(s+'&x=true')}}};w._vwo_code=code;code.init();})(); </script>  <link rel="preload" href="/wp-content/themes/malwarebytes/assets/build/fonts/RobotoSerif-Medium.a8a104b1.woff2" as="font"> <link rel="preload" href="/wp-content/themes/malwarebytes/assets/build/fonts/RobotoSerif-Medium.00ec4109.woff" as="font"> <link rel="preload" href="/wp-content/themes/malwarebytes/assets/build/fonts/RobotoSerif-light.725d86a1.woff2" as="font"> <link rel="preload" href="/wp-content/themes/malwarebytes/assets/build/fonts/RobotoSerif-light.bbcf9d54.woff" as="font"> <link rel="preload" href="/wp-content/themes/malwarebytes/assets/build/fonts/Roboto-Regular.b009a76a.woff2" as="font"> <link rel="preload" href="/wp-content/themes/malwarebytes/assets/build/fonts/Roboto-Regular.f1e2a767.woff" as="font"> <link rel="preload" href="/wp-content/themes/malwarebytes/assets/build/fonts/Roboto-Bold.227c9319.woff2" as="font"> <link rel="preload" href="/wp-content/themes/malwarebytes/assets/build/fonts/Roboto-Bold.77ecb942.woff" as="font"> <link rel="preload" href="/wp-content/themes/malwarebytes/assets/build/fonts/Roboto-Black.2e8becfc.woff2" as="font"> <link rel="preload" href="/wp-content/themes/malwarebytes/assets/build/fonts/Roboto-Black.f5677eb2.woff" as="font"> <link rel="preload" href="/wp-content/themes/malwarebytes/assets/build/images/shape-challenger-2.307bef30.png" as="image"> <link rel="preload" href="/wp-content/themes/malwarebytes/assets/build/images/ajax-loader.6f9ac78c.gif" as="image"> <link rel="preload" href="/wp-content/themes/malwarebytes/assets/build/images/app-play.5ed26b30.png" as="image"> <link rel="preload" href="/wp-content/themes/malwarebytes/assets/build/images/app-store.0d6e625d.png" as="image"> <style id='wp-block-library-inline-css'> :root{--wp-admin-theme-color:#007cba;--wp-admin-theme-color--rgb:0,124,186;--wp-admin-theme-color-darker-10:#006ba1;--wp-admin-theme-color-darker-10--rgb:0,107,161;--wp-admin-theme-color-darker-20:#005a87;--wp-admin-theme-color-darker-20--rgb:0,90,135;--wp-admin-border-width-focus:2px;--wp-block-synced-color:#7a00df;--wp-block-synced-color--rgb:122,0,223;--wp-bound-block-color:#9747ff}@media (min-resolution:192dpi){:root{--wp-admin-border-width-focus:1.5px}}.wp-element-button{cursor:pointer}:root{--wp--preset--font-size--normal:16px;--wp--preset--font-size--huge:42px}:root .has-very-light-gray-background-color{background-color:#eee}:root .has-very-dark-gray-background-color{background-color:#313131}:root .has-very-light-gray-color{color:#eee}:root .has-very-dark-gray-color{color:#313131}:root .has-vivid-green-cyan-to-vivid-cyan-blue-gradient-background{background:linear-gradient(135deg,#00d084,#0693e3)}:root .has-purple-crush-gradient-background{background:linear-gradient(135deg,#34e2e4,#4721fb 50%,#ab1dfe)}:root .has-hazy-dawn-gradient-background{background:linear-gradient(135deg,#faaca8,#dad0ec)}:root .has-subdued-olive-gradient-background{background:linear-gradient(135deg,#fafae1,#67a671)}:root .has-atomic-cream-gradient-background{background:linear-gradient(135deg,#fdd79a,#004a59)}:root .has-nightshade-gradient-background{background:linear-gradient(135deg,#330968,#31cdcf)}:root .has-midnight-gradient-background{background:linear-gradient(135deg,#020381,#2874fc)}.has-regular-font-size{font-size:1em}.has-larger-font-size{font-size:2.625em}.has-normal-font-size{font-size:var(--wp--preset--font-size--normal)}.has-huge-font-size{font-size:var(--wp--preset--font-size--huge)}.has-text-align-center{text-align:center}.has-text-align-left{text-align:left}.has-text-align-right{text-align:right}#end-resizable-editor-section{display:none}.aligncenter{clear:both}.items-justified-left{justify-content:flex-start}.items-justified-center{justify-content:center}.items-justified-right{justify-content:flex-end}.items-justified-space-between{justify-content:space-between}.screen-reader-text{border:0;clip:rect(1px,1px,1px,1px);-webkit-clip-path:inset(50%);clip-path:inset(50%);height:1px;margin:-1px;overflow:hidden;padding:0;position:absolute;width:1px;word-wrap:normal!important}.screen-reader-text:focus{background-color:#ddd;clip:auto!important;-webkit-clip-path:none;clip-path:none;color:#444;display:block;font-size:1em;height:auto;left:5px;line-height:normal;padding:15px 23px 14px;text-decoration:none;top:5px;width:auto;z-index:100000}html :where(.has-border-color){border-style:solid}html :where([style*=border-top-color]){border-top-style:solid}html :where([style*=border-right-color]){border-right-style:solid}html :where([style*=border-bottom-color]){border-bottom-style:solid}html :where([style*=border-left-color]){border-left-style:solid}html :where([style*=border-width]){border-style:solid}html :where([style*=border-top-width]){border-top-style:solid}html :where([style*=border-right-width]){border-right-style:solid}html :where([style*=border-bottom-width]){border-bottom-style:solid}html :where([style*=border-left-width]){border-left-style:solid}html :where(img[class*=wp-image-]){height:auto;max-width:100%}:where(figure){margin:0 0 1em}html :where(.is-position-sticky){--wp-admin--admin-bar--position-offset:var(--wp-admin--admin-bar--height,0px)}@media screen and (max-width:600px){html :where(.is-position-sticky){--wp-admin--admin-bar--position-offset:0px}} </style> <style id='wp-block-heading-inline-css'> h1.has-background,h2.has-background,h3.has-background,h4.has-background,h5.has-background,h6.has-background{padding:1.25em 2.375em}h1.has-text-align-left[style*=writing-mode]:where([style*=vertical-lr]),h1.has-text-align-right[style*=writing-mode]:where([style*=vertical-rl]),h2.has-text-align-left[style*=writing-mode]:where([style*=vertical-lr]),h2.has-text-align-right[style*=writing-mode]:where([style*=vertical-rl]),h3.has-text-align-left[style*=writing-mode]:where([style*=vertical-lr]),h3.has-text-align-right[style*=writing-mode]:where([style*=vertical-rl]),h4.has-text-align-left[style*=writing-mode]:where([style*=vertical-lr]),h4.has-text-align-right[style*=writing-mode]:where([style*=vertical-rl]),h5.has-text-align-left[style*=writing-mode]:where([style*=vertical-lr]),h5.has-text-align-right[style*=writing-mode]:where([style*=vertical-rl]),h6.has-text-align-left[style*=writing-mode]:where([style*=vertical-lr]),h6.has-text-align-right[style*=writing-mode]:where([style*=vertical-rl]){rotate:180deg} </style> <style id='wp-block-image-inline-css'> .wp-block-image img{box-sizing:border-box;height:auto;max-width:100%;vertical-align:bottom}.wp-block-image[style*=border-radius] img,.wp-block-image[style*=border-radius]>a{border-radius:inherit}.wp-block-image.has-custom-border img{box-sizing:border-box}.wp-block-image.aligncenter{text-align:center}.wp-block-image.alignfull img,.wp-block-image.alignwide img{height:auto;width:100%}.wp-block-image .aligncenter,.wp-block-image .alignleft,.wp-block-image .alignright,.wp-block-image.aligncenter,.wp-block-image.alignleft,.wp-block-image.alignright{display:table}.wp-block-image .aligncenter>figcaption,.wp-block-image .alignleft>figcaption,.wp-block-image .alignright>figcaption,.wp-block-image.aligncenter>figcaption,.wp-block-image.alignleft>figcaption,.wp-block-image.alignright>figcaption{caption-side:bottom;display:table-caption}.wp-block-image .alignleft{float:left;margin:.5em 1em .5em 0}.wp-block-image .alignright{float:right;margin:.5em 0 .5em 1em}.wp-block-image .aligncenter{margin-left:auto;margin-right:auto}.wp-block-image figcaption{margin-bottom:1em;margin-top:.5em}.wp-block-image .is-style-rounded img,.wp-block-image.is-style-circle-mask img,.wp-block-image.is-style-rounded img{border-radius:9999px}@supports ((-webkit-mask-image:none) or (mask-image:none)) or (-webkit-mask-image:none){.wp-block-image.is-style-circle-mask img{border-radius:0;-webkit-mask-image:url('data:image/svg+xml;utf8,<svg viewBox="0 0 100 100" xmlns="http://www.w3.org/2000/svg"><circle cx="50" cy="50" r="50"/></svg>');mask-image:url('data:image/svg+xml;utf8,<svg viewBox="0 0 100 100" xmlns="http://www.w3.org/2000/svg"><circle cx="50" cy="50" r="50"/></svg>');mask-mode:alpha;-webkit-mask-position:center;mask-position:center;-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-size:contain;mask-size:contain}}.wp-block-image :where(.has-border-color){border-style:solid}.wp-block-image :where([style*=border-top-color]){border-top-style:solid}.wp-block-image :where([style*=border-right-color]){border-right-style:solid}.wp-block-image :where([style*=border-bottom-color]){border-bottom-style:solid}.wp-block-image :where([style*=border-left-color]){border-left-style:solid}.wp-block-image :where([style*=border-width]){border-style:solid}.wp-block-image :where([style*=border-top-width]){border-top-style:solid}.wp-block-image :where([style*=border-right-width]){border-right-style:solid}.wp-block-image :where([style*=border-bottom-width]){border-bottom-style:solid}.wp-block-image :where([style*=border-left-width]){border-left-style:solid}.wp-block-image figure{margin:0}.wp-lightbox-container{display:flex;flex-direction:column;position:relative}.wp-lightbox-container img{cursor:zoom-in}.wp-lightbox-container img:hover+button{opacity:1}.wp-lightbox-container button{align-items:center;-webkit-backdrop-filter:blur(16px) saturate(180%);backdrop-filter:blur(16px) saturate(180%);background-color:#5a5a5a40;border:none;border-radius:4px;cursor:zoom-in;display:flex;height:20px;justify-content:center;opacity:0;padding:0;position:absolute;right:16px;text-align:center;top:16px;transition:opacity .2s ease;width:20px;z-index:100}.wp-lightbox-container button:focus-visible{outline:3px auto #5a5a5a40;outline:3px auto -webkit-focus-ring-color;outline-offset:3px}.wp-lightbox-container button:hover{cursor:pointer;opacity:1}.wp-lightbox-container button:focus{opacity:1}.wp-lightbox-container button:focus,.wp-lightbox-container button:hover,.wp-lightbox-container button:not(:hover):not(:active):not(.has-background){background-color:#5a5a5a40;border:none}.wp-lightbox-overlay{box-sizing:border-box;cursor:zoom-out;height:100vh;left:0;overflow:hidden;position:fixed;top:0;visibility:hidden;width:100%;z-index:100000}.wp-lightbox-overlay .close-button{align-items:center;cursor:pointer;display:flex;justify-content:center;min-height:40px;min-width:40px;padding:0;position:absolute;right:calc(env(safe-area-inset-right) + 16px);top:calc(env(safe-area-inset-top) + 16px);z-index:5000000}.wp-lightbox-overlay .close-button:focus,.wp-lightbox-overlay .close-button:hover,.wp-lightbox-overlay .close-button:not(:hover):not(:active):not(.has-background){background:none;border:none}.wp-lightbox-overlay .lightbox-image-container{height:var(--wp--lightbox-container-height);left:50%;overflow:hidden;position:absolute;top:50%;transform:translate(-50%,-50%);transform-origin:top left;width:var(--wp--lightbox-container-width);z-index:9999999999}.wp-lightbox-overlay .wp-block-image{align-items:center;box-sizing:border-box;display:flex;height:100%;justify-content:center;margin:0;position:relative;transform-origin:0 0;width:100%;z-index:3000000}.wp-lightbox-overlay .wp-block-image img{height:var(--wp--lightbox-image-height);min-height:var(--wp--lightbox-image-height);min-width:var(--wp--lightbox-image-width);width:var(--wp--lightbox-image-width)}.wp-lightbox-overlay .wp-block-image figcaption{display:none}.wp-lightbox-overlay button{background:none;border:none}.wp-lightbox-overlay .scrim{background-color:#fff;height:100%;opacity:.9;position:absolute;width:100%;z-index:2000000}.wp-lightbox-overlay.active{animation:turn-on-visibility .25s both;visibility:visible}.wp-lightbox-overlay.active img{animation:turn-on-visibility .35s both}.wp-lightbox-overlay.show-closing-animation:not(.active){animation:turn-off-visibility .35s both}.wp-lightbox-overlay.show-closing-animation:not(.active) img{animation:turn-off-visibility .25s both}@media (prefers-reduced-motion:no-preference){.wp-lightbox-overlay.zoom.active{animation:none;opacity:1;visibility:visible}.wp-lightbox-overlay.zoom.active .lightbox-image-container{animation:lightbox-zoom-in .4s}.wp-lightbox-overlay.zoom.active .lightbox-image-container img{animation:none}.wp-lightbox-overlay.zoom.active .scrim{animation:turn-on-visibility .4s forwards}.wp-lightbox-overlay.zoom.show-closing-animation:not(.active){animation:none}.wp-lightbox-overlay.zoom.show-closing-animation:not(.active) .lightbox-image-container{animation:lightbox-zoom-out .4s}.wp-lightbox-overlay.zoom.show-closing-animation:not(.active) .lightbox-image-container img{animation:none}.wp-lightbox-overlay.zoom.show-closing-animation:not(.active) .scrim{animation:turn-off-visibility .4s forwards}}@keyframes turn-on-visibility{0%{opacity:0}to{opacity:1}}@keyframes turn-off-visibility{0%{opacity:1;visibility:visible}99%{opacity:0;visibility:visible}to{opacity:0;visibility:hidden}}@keyframes lightbox-zoom-in{0%{transform:translate(calc((-100vw + var(--wp--lightbox-scrollbar-width))/2 + var(--wp--lightbox-initial-left-position)),calc(-50vh + var(--wp--lightbox-initial-top-position))) scale(var(--wp--lightbox-scale))}to{transform:translate(-50%,-50%) scale(1)}}@keyframes lightbox-zoom-out{0%{transform:translate(-50%,-50%) scale(1);visibility:visible}99%{visibility:visible}to{transform:translate(calc((-100vw + var(--wp--lightbox-scrollbar-width))/2 + var(--wp--lightbox-initial-left-position)),calc(-50vh + var(--wp--lightbox-initial-top-position))) scale(var(--wp--lightbox-scale));visibility:hidden}} </style> <style id='wp-block-image-theme-inline-css'> .wp-block-image figcaption{color:#555;font-size:13px;text-align:center}.is-dark-theme .wp-block-image figcaption{color:#ffffffa6}.wp-block-image{margin:0 0 1em} </style> <style id='wp-block-list-inline-css'> ol,ul{box-sizing:border-box}ol.has-background,ul.has-background{padding:1.25em 2.375em} </style> <style id='wp-block-paragraph-inline-css'> .is-small-text{font-size:.875em}.is-regular-text{font-size:1em}.is-large-text{font-size:2.25em}.is-larger-text{font-size:3em}.has-drop-cap:not(:focus):first-letter{float:left;font-size:8.4em;font-style:normal;font-weight:100;line-height:.68;margin:.05em .1em 0 0;text-transform:uppercase}body.rtl .has-drop-cap:not(:focus):first-letter{float:none;margin-left:.1em}p.has-drop-cap.has-background{overflow:hidden}p.has-background{padding:1.25em 2.375em}:where(p.has-text-color:not(.has-link-color)) a{color:inherit}p.has-text-align-left[style*="writing-mode:vertical-lr"],p.has-text-align-right[style*="writing-mode:vertical-rl"]{rotate:180deg} </style> <link rel="preload" as="style" onload="this.onload=null;this.rel='stylesheet'" href='https://www.malwarebytes.com/_static/??-eJyFjMEKwkAMRH/IbVxQqgfxW9Y1DYE0G7opi3/vUi89FLwN8+YNNAu5qKM6mKzEWoGweFoInZWaga0v4Qy57kj4lcPMOnRwgoObhiTF4c3VN3la+iD09M9IZlD9I1hBsYVJEm3Oc37EMV7j7T6eL1/NZETr' type='text/css' media='all' /> <noscript><link rel='stylesheet' href='https://www.malwarebytes.com/_static/??-eJyFjMEKwkAMRH/IbVxQqgfxW9Y1DYE0G7opi3/vUi89FLwN8+YNNAu5qKM6mKzEWoGweFoInZWaga0v4Qy57kj4lcPMOnRwgoObhiTF4c3VN3la+iD09M9IZlD9I1hBsYVJEm3Oc37EMV7j7T6eL1/NZETr'> </noscript><style id='weglot-css-inline-css'> html:not([lang="en"]) .site-header-searchbox { display: none!important; } </style> <style id='custom-flag-handle-inline-css'> .weglot-flags.flag-0.en>a:before,.weglot-flags.flag-0.en>span:before {background-image: url(https://cdn.weglot.com/flags/rectangle_mat/us.svg); }.weglot-flags.flag-1.en>a:before,.weglot-flags.flag-1.en>span:before {background-image: url(https://cdn.weglot.com/flags/shiny/us.svg); }.weglot-flags.flag-2.en>a:before,.weglot-flags.flag-2.en>span:before {background-image: url(https://cdn.weglot.com/flags/square/us.svg); }.weglot-flags.flag-3.en>a:before,.weglot-flags.flag-3.en>span:before {background-image: url(https://cdn.weglot.com/flags/circle/us.svg); } </style> <link rel='stylesheet' id='base-fonts-style-css' href='https://www.malwarebytes.com/wp-content/themes/malwarebytes/assets/build/base-fonts.css?ver=1732292781' media='all' /> <link rel='stylesheet' id='base-blog-style-css' href='https://www.malwarebytes.com/wp-content/themes/malwarebytes/assets/build/base-blog.css?ver=1732294374' media='all' /> <link rel='stylesheet' id='base-css-css' href='https://www.malwarebytes.com/wp-content/themes/malwarebytes/assets/build/base.css?ver=1.0' media='all' /> <link rel="preload" as="style" onload="this.onload=null;this.rel='stylesheet'" href='https://www.malwarebytes.com/wp-content/themes/malwarebytes/assets/library/css/font-awesome.min.css?m=1692804712g' type='text/css' media='all' /> <noscript><link rel='stylesheet' href='https://www.malwarebytes.com/wp-content/themes/malwarebytes/assets/library/css/font-awesome.min.css?m=1692804712g'> </noscript><style id='kadence-blocks-global-variables-inline-css'> :root {--global-kb-font-size-sm:clamp(0.8rem, 0.73rem + 0.217vw, 0.9rem);--global-kb-font-size-md:clamp(1.1rem, 0.995rem + 0.326vw, 1.25rem);--global-kb-font-size-lg:clamp(1.75rem, 1.576rem + 0.543vw, 2rem);--global-kb-font-size-xl:clamp(2.25rem, 1.728rem + 1.63vw, 3rem);--global-kb-font-size-xxl:clamp(2.5rem, 1.456rem + 3.26vw, 4rem);--global-kb-font-size-xxxl:clamp(2.75rem, 0.489rem + 7.065vw, 6rem);}:root {--global-palette1: #3182CE;--global-palette2: #2B6CB0;--global-palette3: #1A202C;--global-palette4: #2D3748;--global-palette5: #4A5568;--global-palette6: #718096;--global-palette7: #EDF2F7;--global-palette8: #F7FAFC;--global-palette9: #ffffff;} </style> <script type="text/javascript" src="https://www.malwarebytes.com/wp-content/plugins/weglot/dist/front-js.js?m=1730848674g" ></script><link rel="https://api.w.org/" href="https://www.malwarebytes.com/wp-json/" /><link rel="alternate" type="application/json" href="https://www.malwarebytes.com/wp-json/wp/v2/posts/122044" /><link rel='shortlink' href='https://www.malwarebytes.com/?p=122044' /> <link rel="alternate" type="application/json+oembed" href="https://www.malwarebytes.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.malwarebytes.com%2Fblog%2Fnews%2F2024%2F11%2Ffree-ai-editor-lures-in-victims-installs-information-stealer-instead-on-windows-and-mac" /> <link rel="alternate" type="text/xml+oembed" href="https://www.malwarebytes.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.malwarebytes.com%2Fblog%2Fnews%2F2024%2F11%2Ffree-ai-editor-lures-in-victims-installs-information-stealer-instead-on-windows-and-mac&format=xml" /> <style>img#wpstats{display:none}</style> <link rel="icon" href="https://www.malwarebytes.com/wp-content/uploads/sites/2/2023/08/cropped-favicon-512x512-1-1.png?w=32" sizes="32x32" /> <link rel="icon" href="https://www.malwarebytes.com/wp-content/uploads/sites/2/2023/08/cropped-favicon-512x512-1-1.png?w=192" sizes="192x192" /> <link rel="apple-touch-icon" href="https://www.malwarebytes.com/wp-content/uploads/sites/2/2023/08/cropped-favicon-512x512-1-1.png?w=180" /> <meta name="msapplication-TileImage" content="https://www.malwarebytes.com/wp-content/uploads/sites/2/2023/08/cropped-favicon-512x512-1-1.png?w=270" /> <style id="wp-custom-css"> @media (min-width: 1150px) { .site-header.mb-header-pricing .site-header__nav ul.primary-menu > li:not(:nth-child(3)) .megamenu-wrap { transform: translate(-42%, -200%); } .site-header.mb-header-pricing .site-header__nav ul.primary-menu > li:not(:nth-child(3)).active .megamenu-wrap { transform: translate(-42%, 0); } } </style> <meta name="apple-itunes-app" content="app-id=1327105431, affiliate-data=, app-argument="> <meta name="facebook-domain-verification" content="cmdpjevu8l4zya3vzr1p6f00v21uty" />  <script type="text/javascript">(function (w, d, s, l, i) { w[l] = w[l] || []; w[l].push({ 'gtm.start': new Date().getTime(), event: 'gtm.js' }); var f = d.getElementsByTagName(s)[0], j = d.createElement(s), dl = l != 'dataLayer' ? '&l=' + l : ''; j.async = true; j.src = '//www.googletagmanager.com/gtm.js?id=' + i + dl; f.parentNode.insertBefore(j, f); })(window, document, 'script', 'dataLayer', 'GTM-MKSKW3'); </script>  <script> (function () { let plausibleDataDomain = 'dev-www.malwarebytes.com'; if (location.href.indexOf('https://www.malwarebytes.com') === 0 || location.href.indexOf('https://malwarebytes.go-vip.net') === 0) { plausibleDataDomain = 'w.malwarebytes.com,malwarebytes.com'; } else if (location.href.indexOf('https://preprod-www.malwarebytes.com') === 0) { plausibleDataDomain = 'staging-www.malwarebytes.com'; } let script = document.createElement('script'); script.defer = true; script.src = 'https://plausible.io/js/script.js'; script.dataset.domain = plausibleDataDomain; document.head.appendChild(script); })(); </script> <body class="post-template-default single single-post postid-122044 single-format-standard wp-custom-logo"> <div id="page" class="site"> <a class="skip-link screen-reader-text" href="#primary">Skip to content</a> <header id="masthead" class="site-header mb-header-blog"> <div class="container"> <div class="site-header__top">  <div class="site-header-searchbox"> <button class="searchbox-nav" aria-label="Search in MalwareBytes">Search</button> <div class="search-modal"> <label>Search Malwarebytes.com</label> <div class="custom-search-form"> <form role="search" method="get" class="search-form" action="https://www.malwarebytes.com/"> <label> <span class="screen-reader-text">Search for:</span> <input type="search" class="search-field" placeholder="Type to search..." value="" name="s" /> </label> <input type="submit" class="search-submit" value="Search" /> </form> </div> </div> </div>  <ul id="secondary-menu" class="secondary-menu u-flex-center"><li id="menu-item-2914" class="signin-items menu-item menu-item-type-custom menu-item-object-custom menu-item-2914"><a href="https://my.malwarebytes.com/en/login" id="cta-en-us-utilbar-my_malwarebytes_com_en_login-click">Sign In</a></li> </ul> </div> <div class="site-header__bottom u-flex-columns"> <div class="site-header__branding u-flex-column u-flex-col-lg-3 u-flex-col-9"> <a href="https://www.malwarebytes.com/blog" rel="home" id="cta-navbar-company-logo-en-blog"> <svg width="183" height="24" viewBox="0 0 183 24" xmlns="http://www.w3.org/2000/svg"><path d="M9.225 20.116c.072 0 .072 0 0 0 .215 0 .286-.148.286-.296s-.071-.222-.214-.296h-.215c-2.717-.592-4.863-3.106-4.863-6.064A6.55 6.55 0 0 1 5.22 9.984c.072-.148.287-.222.43-.074l4.362 4.585c.071.074.143.074.214.074.072 0 .143 0 .215-.074l4.434-4.511c.143-.148.286-.148.429 0 .643.961 1 2.145 1 3.476a6.351 6.351 0 0 1-1.5 4.141s-.072.074-.072.148v.074c0 .148.143.222.214.222 0 0 .072 0 .143-.074 5.793-2.588 5.578-8.505 5.578-8.505 0-3.402-1.573-6.508-4.005-8.43-.143-.075-.286-.075-.357 0l-5.793 5.99c-.143.148-.286.148-.357 0l-5.793-5.99c-.071-.075-.286-.149-.357 0C1.573 2.957 0 6.063 0 9.465c0 5.547 4.076 10.058 9.225 10.65Z" fill="#0D3ECC"/><path d="m160.975 18.045-5.292-13.238-5.292 13.312h1.431l1.001-2.662h3.432l-2.789-1.701 2.217-5.62 2.861 7.543h-2.503l5.006 2.366h-.072Z" fill="#3D3D3D"/><path d="M90.32 5.99 90.25.222c0-.148-.144-.222-.287-.222L88.39.222c-.143 0-.215.148-.215.222v17.083c0 .148.072.222.143.222 1.36.296 3.075.444 4.148.444 4.505 0 5.149-2.219 5.149-4.66V9.097c0-2.588-1.144-3.92-3.504-3.92-1.573-.073-3.004.445-3.79.814Zm5.364 2.959v4.659c0 1.7-.5 2.81-3.003 2.81-.859 0-1.645-.074-2.432-.148h-.071V7.913c.715-.37 2.216-.961 3.36-.961 1.502 0 2.146.591 2.146 1.997Zm4.648-3.55h-1.501c-.143 0-.286.148-.215.296l3.79 12.054c0 .074.143.148.215.148h.429c.143 0 .286.148.215.296l-1.502 4.511c-.072.148.071.296.214.296h1.431c.071 0 .143-.074.214-.148l1.645-4.881L109.2 5.695c.072-.148-.071-.296-.214-.296h-1.502c-.072 0-.143.074-.215.148l-3.146 10.205c-.072.222-.358.222-.429 0l-3.147-10.205c0-.074-.143-.148-.215-.148Zm18.665 4.437v3.772c0 3.106 1.502 4.585 4.792 4.585 1.43 0 2.932-.222 4.076-.666.143 0 .143-.148.143-.296l-.215-1.183c0-.148-.143-.222-.286-.148-1.358.37-2.503.518-3.575.518-2.503 0-2.932-.961-2.932-2.81v-.888c0-.148.071-.222.214-.222h6.865c.143 0 .215-.074.215-.221V9.91c0-3.18-1.502-4.733-4.505-4.733-3.147-.074-4.792 1.553-4.792 4.659ZM121 9.614c0-1.923.858-2.81 2.717-2.81s2.646.813 2.646 2.81v.888c0 .147-.071.221-.214.221h-4.935c-.143 0-.214-.074-.214-.221v-.888Zm13.158 1.183c-2.074-.517-2.145-.813-2.145-2.218 0-1.183.286-1.627 2.074-1.627.858 0 2.073.148 3.075.296.143 0 .286-.074.286-.222l.143-1.257c0-.148-.072-.222-.143-.222-.93-.222-2.074-.37-3.218-.37-3.004 0-4.148.887-4.148 3.328 0 2.588.286 3.254 3.289 3.993 2.432.592 2.575.74 2.575 2.145 0 1.331-.286 1.775-2.289 1.775-.929 0-2.216-.148-3.218-.444-.143 0-.286.074-.286.148l-.214 1.183c0 .148.071.222.143.296 1.001.37 2.503.592 3.647.592 3.504 0 4.148-1.183 4.148-3.624 0-2.662-.429-2.958-3.719-3.772ZM41.692 17.75 39.547 5.546c0-.148.071-.296.214-.296h2.432c.143 0 .214.074.214.148l1.287 7.321c0 .222.358.296.43 0l2.145-7.395c0-.074.143-.148.214-.148h2.86c.072 0 .144.074.215.148l2.074 7.395a.222.222 0 0 0 .43 0L53.348 5.4c0-.148.143-.148.214-.148h2.432c.143 0 .214.148.214.296L54.063 17.75c0 .148-.143.148-.215.148H50.63c-.071 0-.143-.074-.214-.148l-2.36-8.135a.222.222 0 0 0-.43 0l-2.36 8.135c0 .074-.142.148-.214.148h-3.218c0 .074-.143 0-.143-.148Zm-3.504-2.146c-1.073 0-1.43-.517-1.43-1.922V.96c0-.148-.143-.221-.286-.221l-2.575.37c-.143 0-.214.147-.214.221v12.721c0 2.885 1.716 4.142 3.933 4.142.214 0 1.072 0 1.43-.074.143 0 .215-.148.215-.222V15.9c0-.148-.143-.222-.215-.222-.286-.074-.643-.074-.858-.074ZM75.16 8.061c-1.073.518-1.93 1.035-3.004 1.701-.071 0-.143.148-.143.222v7.765c0 .148-.071.222-.214.222h-2.646c-.143 0-.215-.074-.215-.222V5.99c0-.148.072-.221.143-.221l2.217-.37c.143 0 .215.074.286.148l.143.813c0 .148.215.222.358.148.644-.444 1.788-1.11 2.646-1.405.143-.074.286.074.286.222l.286 2.44c0 .148 0 .222-.143.296Zm40.691 8.357c-1.216 0-1.287-.592-1.287-1.48V7.323c0-.148.071-.222.214-.222h2.861c.143 0 .214-.074.214-.222l.143-1.257c0-.148-.071-.296-.214-.296h-3.004c-.143 0-.214-.074-.214-.222V2.219c0-.148-.144-.222-.287-.222l-1.573.222c-.143 0-.214.148-.214.222v2.736c0 .148-.072.222-.215.222h-1.716c-.143 0-.215.074-.215.222v1.257c0 .148.072.222.215.222h1.716c.143 0 .215.074.215.222v7.987c0 1.996.858 2.81 3.003 2.81.501 0 .93-.074 1.43-.148.143 0 .143-.148.143-.222v-1.183c0-.148-.143-.222-.286-.222-.286.074-.572.074-.929.074ZM84.028 5.473c-.644-.296-1.502-.444-2.503-.444-1.145 0-2.146.222-2.86.592-1.646.813-2.218 2.514-2.218 4.363v3.328c0 2.958 1.287 4.807 4.935 4.88h.858c1.001 0 2.002-.147 3.003-.295.143 0 .215-.148.215-.296v-.148l-.286-1.7c-.93.073-1.716.147-2.646.147-2.217 0-2.932-.665-2.932-2.07v-1.036h6.579c.143 0 .215-.074.215-.222v-2.514c-.072-1.997-.573-3.772-2.36-4.585Zm-.43 5.029c0 .147-.071.221-.214.221h-3.862V9.614c0-1.183.5-1.997 2.003-1.997h.5c1.144.148 1.573.962 1.573 1.997v.888Zm-57.71-5.399c-1.073 0-2.217.074-3.218.222-.143 0-.215.148-.143.296l.286 1.922c0 .148.143.222.214.222 1.001-.148 1.645-.148 2.646-.148 2.217 0 2.932.666 2.932 2.071v.814c0 .147-.071.221-.214.221h-2.86c-2.504 0-3.934 1.332-3.934 3.698 0 2.219 1.645 3.772 4.076 3.772 1.573 0 2.146-.222 2.646-.74.143-.148.358 0 .358.148v.148c0 .148.071.222.214.222h2.432c.143 0 .214-.074.214-.222V9.69c0-3.107-2.074-4.586-5.65-4.586Zm2.646 8.135c0 1.553-1.073 2.662-2.646 2.662-1.288 0-1.931-.517-1.931-1.553 0-1.109.643-1.553 1.93-1.553h2.432c.143 0 .215.074.215.222v.222Zm32.681-8.135c-1.073 0-2.217.074-3.218.222-.143 0-.215.148-.143.296l.286 1.922c0 .148.143.222.214.222C59.356 7.617 60 7.617 61 7.617c2.217 0 2.932.666 2.932 2.071v.814c0 .147-.071.221-.214.221h-2.86c-2.504 0-3.934 1.332-3.934 3.698 0 2.219 1.645 3.772 4.076 3.772 1.574 0 2.146-.222 2.646-.74.143-.148.358 0 .358.148v.148c0 .148.072.222.215.222h2.503c.143 0 .214-.074.214-.222V9.69c0-3.107-2.145-4.586-5.721-4.586Zm2.646 8.135c0 1.553-1.073 2.662-2.646 2.662-1.287 0-1.93-.517-1.93-1.553 0-1.109.643-1.553 1.93-1.553h2.431c.143 0 .215.074.215.222v.222Z" fill="#0D3ECC"/><path d="M177.352 18.119c-1.574 0-3.29-.37-4.935-1.035l.358-1.332c1.502.518 3.146.888 4.505.888 1.931 0 3.075-.814 3.075-1.923 0-.961-.572-1.479-3.361-2.588-3.146-1.184-4.219-2.071-4.219-3.994 0-2.07 1.645-2.958 4.577-2.958 1.287 0 3.075.222 4.291.665l-.287 1.332c-1.215-.296-2.646-.518-3.933-.518-2.145 0-3.003.37-3.003 1.48 0 1.182.786 1.626 3.647 2.735 3.146 1.258 3.933 1.997 3.933 3.772.072 2.07-1.788 3.476-4.648 3.476Zm-27.676-.074h-5.363c-.715 0-1.144-.296-1.359-.518-.429-.517-.429-1.109-.429-1.33V5.102h1.287v11.241c0 .074 0 .222.072.296.071.074.286.148.357.148h5.364l.071 1.257Zm21.812-3.624c0-1.553-.715-2.81-2.217-3.402.929-.517 1.645-1.479 1.645-2.81 0-1.923-1.431-3.032-3.934-3.032h-5.005v11.019c0 .148 0 .814.429 1.331.214.296.643.518 1.358.518h3.79c2.718-.074 3.934-1.7 3.934-3.624Zm-8.153-7.987h3.647c1.788 0 2.646.592 2.646 1.923s-.858 2.219-2.503 2.219h-3.79V6.434Zm4.863 10.28h-4.434c-.143 0-.286 0-.357-.148-.072-.074-.072-.296-.072-.296v-4.437h4.219c1.788 0 2.646 1.11 2.575 2.514-.072 1.258-.715 2.145-1.931 2.367Z" fill="#3D3D3D"/></svg> </a> </div> <div class="site-header__bottom-right u-flex-column u-flex-col-lg-9 u-flex-col-3"> <button class="menu-toggle" aria-label="Menu" aria-controls="primary-menu" aria-expanded="false"> <span class="menu-toggle-bar menu-toggle-bar1"></span> <span class="menu-toggle-bar menu-toggle-bar2"></span> <span class="menu-toggle-bar menu-toggle-bar3"></span> </button> <div class="site-header__nav"> <nav id="site-navigation" class="main-navigation"> <ul id="primary-menu" class="primary-menu u-flex-center"><li id="menu-item-2906" class="personal-menu-class menu-item menu-item-type-custom menu-item-object-custom menu-item-2906 menu-item-has-megamenu"><a href="#" id="cta-en-us-navbar-personal-click">Personal</a><div class="megamenu-wrap"> <div class="wp-block-columns is-layout-flex wp-container-core-columns-is-layout-1 wp-block-columns-is-layout-flex" style="padding-bottom:0"> <div class="wp-block-column is-layout-flow wp-block-column-is-layout-flow" style="flex-basis:29%"> <p>< Products</p> <div class="wp-block-group alignfull is-vertical is-content-justification-stretch is-layout-flex wp-container-core-group-is-layout-1 wp-block-group-is-layout-flex"> <div class="wp-block-malware-bytes-menu-links menu-links layout-1 has-item-border" id="menu-links-4ed3bf9a-9621-4f6d-8aba-9a5850ee5951"><div class="menu-links__item"><div class="menu-links__title" style="color:#0d3ecc"><strong>Computer Protection</strong></div><ul><li><a id="cta-en-us-navbar-personal-malwarebytes-premium-click" href="https://www.malwarebytes.com/premium">Premium Security ></a></li><li><a id="cta-en-us-navbar-_getprotection-click" href="https://www.malwarebytes.com/getprotection">Free Antivirus ></a></li><li><a id="cta-en-us-navbar-_getprotection-click2" href="https://www.malwarebytes.com/solutions/virus-scanner">Free Virus Scan ></a></li></ul></div><div class="menu-links__item"><div class="menu-links__title" style="color:#0d3ecc"><strong>Mobile Protection</strong></div><ul><li><a id="cta-en-us-navbar-_ios-click" href="https://www.malwarebytes.com/ios">iOS Security ></a></li><li><a id="cta-en-us-navbar-_android-click" href="https://www.malwarebytes.com/android">Android Security ></a></li></ul></div></div> </div> </div> <div class="wp-block-column is-layout-flow wp-block-column-is-layout-flow" style="flex-basis:29%"> <div class="wp-block-group alignfull is-vertical is-content-justification-stretch is-layout-flex wp-container-core-group-is-layout-2 wp-block-group-is-layout-flex"> <div class="wp-block-malware-bytes-menu-links menu-links layout-1 has-item-border" id="menu-links-4ed3bf9a-9621-4f6d-8aba-9a5850ee5951"><div class="menu-links__item"><div class="menu-links__title" style="color:#0d3ecc"><strong>Identity Protection</strong></div><ul><li><a id="cta-en-us-navbar-_identity_theft_protection-click" href="https://www.malwarebytes.com/identity-theft-protection">Identity Theft Protection ></a></li><li><a id="cta-en-us-navbar-digital-footprint-scanner-click" href="https://www.malwarebytes.com/digital-footprint">Digital Footprint Scanner ></a></li><li><a id="cta-en-us-navbar-personal-data-remover-click" href="https://www.malwarebytes.com/personal-data-remover">Personal Data Remover ></a></li></ul></div><div class="menu-links__item"><div class="menu-links__title" style="color:#0d3ecc"><strong>Privacy Protection</strong></div><ul><li><a id="cta-en-us-navbar-_vpn-click" href="https://www.malwarebytes.com/vpn" data-type="link" data-id="https://www.malwarebytes.com/vpn">VPN ></a></li><li><a id="cta-en-us-navbar-_adwcleaner-click" href="https://www.malwarebytes.com/adwcleaner">AdwCleaner ></a></li><li><a id="cta-en-us-navbar-_browserguard-click" href="https://www.malwarebytes.com/browserguard">Browser Guard ></a></li></ul></div></div> </div> </div> <div class="wp-block-column is-layout-flow wp-block-column-is-layout-flow" style="flex-basis:37%"> <div class="wp-block-group alignfull flex-direction-row is-vertical is-content-justification-stretch is-layout-flex wp-container-core-group-is-layout-3 wp-block-group-is-layout-flex"> <div class="wp-block-malware-bytes-menu-links menu-links layout-1 has-item-border" id="menu-links-d24ba127-7e50-44f9-8919-360f85d19902" style="background-color:#ffffff"><div class="menu-links__item"><p class="menu-links__desc" style="color:#135e96"><span data-fontsize="18" class="qubely-custom-font" style="font-size: 18px;"><span data="#191919" class="qubely-text-has-color" style="color: #191919;">Have a current computer infection?</span></span></p><div class="menu-links__cta" style="color:#135e96"><a id="cta-en-us-navbar-clean-your-device-now-click" href="https://www.malwarebytes.com/getprotection"><strong>Clean your device now</strong></a></div></div><div class="menu-links__item"><p class="menu-links__desc" style="color:#135e96"><span data="#191919" class="qubely-text-has-color" style="color: #191919;"><span data-fontsize="18" class="qubely-custom-font" style="font-size: 18px;">Try our antivirus with a free, full-featured 14-day trial</span></span></p><div class="menu-links__cta" style="color:#135e96"><a id="cta-en-us-navbar-download-now-click" href="https://www.malwarebytes.com/getprotection"><strong>Download now</strong></a></div></div><div class="menu-links__item"><p class="menu-links__desc" style="color:#135e96"><span data="#191919" class="qubely-text-has-color" style="color: #191919;"><span data-fontsize="18" class="qubely-custom-font" style="font-size: 18px;">Find the right cyberprotection for you</span></span></p><div class="menu-links__cta" style="color:#135e96"><a id="cta-en-us-navbar-see-our-plans-click" href="https://www.malwarebytes.com/pricing"><strong>Compare plans and pricing</strong></a></div></div></div> </div> </div> </div> </div></li> <li id="menu-item-2907" class="business-menu-class menu-item menu-item-type-custom menu-item-object-custom menu-item-2907 menu-item-has-megamenu"><a href="#" id="cta-en-us-navbar-business-click">Business</a><div class="megamenu-wrap"> <div class="wp-block-columns is-layout-flex wp-container-core-columns-is-layout-2 wp-block-columns-is-layout-flex"> <div class="wp-block-column is-layout-flow wp-block-column-is-layout-flow" style="flex-basis:25%"></div> <div class="wp-block-column is-layout-flow wp-block-column-is-layout-flow" style="flex-basis:35%"> <p>< Business</p> <div class="wp-block-malware-bytes-menu-links menu-links layout-1 has-item-border" id="menu-links-f01e317a-5669-417c-ae3d-5bae36e32f8c"><div class="menu-links__item"><div class="menu-links__title" style="color:#0D3ECC"><strong><a id="cta-en-us-navbar-business-teams-click" href="https://www.malwarebytes.com/teams">Teams ></a></strong></div><div class="menu-links__subtitle">Simple to manage protection for 20 or fewer devices</div></div><div class="menu-links__item"><div class="menu-links__title" style="color:#0D3ECC"><strong><a href="https://www.threatdown.com/?utm_campaign=mwb-referral&utm_source=malwarebytes.com&utm_medium=referral&utm_content=cta-mb-nav-threatdown">ThreatDown ></a></strong></div><div class="menu-links__subtitle">Award-winning endpoint security for small and medium businesses</div></div></div> </div> </div> </div></li> <li id="menu-item-2908" class="pricing-menu-class menu-item menu-item-type-custom menu-item-object-custom menu-item-2908 menu-item-has-megamenu"><a href="#" id="cta-en-us-navbar-pricing-click">Pricing</a><div class="megamenu-wrap"> <div class="wp-block-columns is-layout-flex wp-container-core-columns-is-layout-3 wp-block-columns-is-layout-flex"> <div class="wp-block-column is-layout-flow wp-block-column-is-layout-flow"></div> <div class="wp-block-column is-layout-flow wp-block-column-is-layout-flow"> <p>< Pricing</p> <div class="wp-block-malware-bytes-menu-links menu-links layout-1 has-item-border" id="menu-links-8b91929a-d4ec-4127-b3f4-08b5703b82f6"><div class="menu-links__item"><div class="menu-links__title"><a id="cta-en-us-navbar-pricing-personal-pricing-click" href="https://www.malwarebytes.com/pricing" data-type="page" data-id="3844">Personal pricing</a></div><p class="menu-links__desc">Protect your personal devices and data</p></div><div class="menu-links__item"><div class="menu-links__title"><a id="cta-en-us-navbar-pricing-small-office-home-office-pricing-click" href="https://www.malwarebytes.com/pricing/teams" data-type="page" data-id="406">Small office/home office pricing</a></div><p class="menu-links__desc">Protect your team’s devices and data</p></div><div class="menu-links__item"><div class="menu-links__title"><a id="cta-en-us-navbar-pricing-business-pricing-click" href="https://www.threatdown.com/pricing/?utm_campaign=mwb-referral&utm_source=malwarebytes.com&utm_medium=referral&utm_content=cat-en-us-navbar-pricing-business-pricing-click" data-type="page" data-id="124">Business pricing (5+ employees)</a></div><p class="menu-links__desc">Step up your corporate endpoint security. Save up to 45%</p></div></div> </div> <div class="wp-block-column is-layout-flow wp-block-column-is-layout-flow"></div> </div> </div></li> <li id="menu-item-2909" class="partners-menu-class menu-item menu-item-type-custom menu-item-object-custom menu-item-2909 menu-item-has-megamenu"><a href="#" id="cta-en-us-navbar-partners-click">Partners</a><div class="megamenu-wrap"> <div class="wp-block-columns is-layout-flex wp-container-core-columns-is-layout-4 wp-block-columns-is-layout-flex"> <div class="wp-block-column is-layout-flow wp-block-column-is-layout-flow"></div> <div class="wp-block-column is-layout-flow wp-block-column-is-layout-flow" style="flex-basis:30%"> <p>< Partners</p> <div class="wp-block-malware-bytes-menu-links menu-links layout-1 has-item-border" id="menu-links-e13d480b-8377-4493-b67e-2fa03815fbb5"><div class="menu-links__item"><div class="menu-links__title"><br><a id="cta-navbar-partners-explore-partnerships-en-test" href="https://www.malwarebytes.com/partners">Malwarebytes</a></div><ul><li><a href="https://www.malwarebytes.com/affiliates" data-type="link" data-id="https://www.malwarebytes.com/affiliates">Affiliate partner ></a></li><li><a href="https://www.malwarebytes.com/techbench">Computer repair ></a><br></li></ul></div><div class="menu-links__item"><div class="menu-links__title"><a href="https://www.threatdown.com/partner-program/?utm_campaign=mwb-referral&utm_source=malwarebytes.com&utm_medium=referral&utm_content=cta-navbar-partners-explore-partnerships-en-test" target="_blank" rel="noreferrer noopener">ThreatDown: Malwarebytes for Business</a></div><ul><li><a id="cta-navbar-partners-solution-providers-en-test" href="https://www.threatdown.com/partner-program/partner-reseller/?utm_campaign=mwb-referral&utm_source=malwarebytes.com&utm_medium=referral&utm_content=cta-navbar-partners-solution-providers-en-test" target="_blank" rel="noreferrer noopener">Resellers</a> ></li><li><a id="cta-navbar-partners-managed-service-providers-en-test" href="https://www.threatdown.com/partner-program/msp/?utm_campaign=mwb-referral&utm_source=malwarebytes.com&utm_medium=referral&utm_content=cta-navbar-partners-managed-service-providers-en-test" data-type="page" data-id="3311" target="_blank" rel="noreferrer noopener">Managed Service Providers (MSP/ISS) ></a></li></ul></div></div> </div> <div class="wp-block-column has-white-background-color has-background is-layout-flow wp-block-column-is-layout-flow" style="flex-basis:34%"></div> </div> </div></li> <li id="menu-item-2910" class="resources-menu-class menu-item menu-item-type-custom menu-item-object-custom menu-item-2910 menu-item-has-megamenu"><a href="#" id="cta-en-us-navbar-resources-click">Resources</a><div class="megamenu-wrap"> <div class="wp-block-columns is-layout-flex wp-container-core-columns-is-layout-5 wp-block-columns-is-layout-flex" style="padding-right:var(--wp--preset--spacing--80);padding-left:0"> <div class="wp-block-column is-layout-flow wp-block-column-is-layout-flow" style="flex-basis:33.33%"></div> <div class="wp-block-column is-layout-flow wp-block-column-is-layout-flow" style="flex-basis:34.48%"> <p>< Resources</p> <div class="wp-block-malware-bytes-menu-links menu-links layout-1 has-item-border" id="menu-links-d6a9ae27-5550-4478-b20f-6394817e1ef7"><div class="menu-links__item"><div class="menu-links__title"><a id="cta-en-us-navbar-_resources-learn-cybcersecurity-click" href="https://www.malwarebytes.com/blog"><img decoding="async" width="130" height="16" class="wp-image-119531" style="width: 130px;" src="https://www.malwarebytes.com/wp-content/uploads/sites/2/2023/07/Malwarebytes_Labs_logo_Color-2.png" alt="Malwarebytes Labs" srcset="https://www.malwarebytes.com/wp-content/uploads/sites/2/2023/07/Malwarebytes_Labs_logo_Color-2.png 159w, https://www.malwarebytes.com/wp-content/uploads/sites/2/2023/07/Malwarebytes_Labs_logo_Color-2.png?resize=150,19 150w" sizes="(max-width: 130px) 100vw, 130px" /></a></div><ul><li><a id="cta-en-us-navbar-_antivirus-click" href="https://www.malwarebytes.com/glossary">Security terms glossary ></a></li><li><a id="cta-en-us-navbar-_malware-click" href="https://www.malwarebytes.com/blog/threats">Threat Center ></a></li><li><a href="https://www.malwarebytes.com/blog">Cybersecurity News ></a></li></ul></div><div class="menu-links__item"><ul><li><a id="cta-en-us-navbar-_glossary-click" href="https://www.malwarebytes.com/company">About Malwarebytes ></a></li><li><a id="cta-en-us-navbar-_blog_threats-click" href="https://www.malwarebytes.com/press/">Press ></a></li><li><a href="https://www.malwarebytes.com/jobs">Careers ></a></li></ul></div></div> </div> <div class="wp-block-column is-layout-flow wp-block-column-is-layout-flow" style="flex-basis:32.19%"> <p></p> <div class="wp-block-malware-bytes-menu-links menu-links layout-1 has-item-border" id="menu-links-0a8428cf-74da-4b5d-a0ed-6cf810a8b368"><div class="menu-links__item"><div class="menu-links__title"><a id="cta-en-us-navbar-_resources-business-click" href="https://www.malwarebytes.com/cybersecurity">Cybersecurity Resource Center</a></div><ul><li><a id="cta-en-us-navbar-_resources-click" href="https://www.malwarebytes.com/cybersecurity/basics/antivirus">Antivirus ></a></li><li><a href="https://www.malwarebytes.com/malware">Malware ></a></li><li><a id="cta-en-us-navbar-_resources_casestudies-click" href="https://www.malwarebytes.com/ransomware">Ransomware ></a></li><li><a href="https://www.malwarebytes.com/phishing">Phishing ></a></li><li><a href="https://www.malwarebytes.com/cybersecurity">See all articles ></a></li></ul></div></div> </div> </div> </div></li> <li id="menu-item-2911" class="support-menu-class menu-item menu-item-type-custom menu-item-object-custom menu-item-2911 menu-item-has-megamenu"><a href="#" id="cta-en-us-navbar-support-click">Support</a><div class="megamenu-wrap"> <div class="wp-block-columns is-layout-flex wp-container-core-columns-is-layout-6 wp-block-columns-is-layout-flex"> <div class="wp-block-column is-layout-flow wp-block-column-is-layout-flow" style="flex-basis:30%"></div> <div class="wp-block-column is-layout-flow wp-block-column-is-layout-flow" style="flex-basis:30%"></div> <div class="wp-block-column is-layout-flow wp-block-column-is-layout-flow" style="flex-basis:35%"> <p>< Support</p> <div class="wp-block-malware-bytes-menu-links menu-links layout-1 has-item-border" id="menu-links-8b91929a-d4ec-4127-b3f4-08b5703b82f6"><div class="menu-links__item"><div class="menu-links__title"><a id="cta-navbar-support-personal-click" href="https://support.malwarebytes.com/hc/en-us" data-type="page" data-id="3844">Malwarebytes Personal Support</a></div><p class="menu-links__desc">Malwarebytes and Teams Customers</p></div><div class="menu-links__item"><div class="menu-links__title"><a id="cta-navbar-support-Threatdown-business-click" href="https://support.threatdown.com/hc/en-us/?utm_campaign=mwb-referral&utm_source=malwarebytes.com&utm_medium=referral&utm_content=cta-navbar-support-Threatdown-business-click" data-type="page" data-id="406">ThreatDown Business Support</a></div><p class="menu-links__desc">Nebula and Oneview Customers</p></div><div class="menu-links__item"><div class="menu-links__title"><a id="cta-navbar-support-community-forums-click" href="https://forums.malwarebytes.com/" data-type="page" data-id="124">Community Forums</a></div></div></div> </div> </div> </div></li> </ul> </nav> <div class="site-header__actions"> <a href="#" id="cta-navbar-freedownload-main-en-test" class="mb-free-download-btn btn-main btn-primary-yellow u-text-transform-upper" aria-label="Free Download">Free Download</a> </div> <ul id="secondary-menu-mob" class="secondary-menu u-flex-direction-column u-display-none@min-1150"></ul>  <div class="site-header-searchbox"> <button class="searchbox-nav-mobile" aria-label="Search in MalwareBytes">Search</button> <button class="searchbox-nav" aria-label="Search in MalwareBytes">Search</button> <div class="search-modal"> <label>Search Malwarebytes.com</label> <div class="custom-search-form"> <form role="search" method="get" class="search-form" action="https://www.malwarebytes.com/"> <label> <span class="screen-reader-text">Search for:</span> <input type="search" class="search-field" placeholder="Type to search..." value="" name="s" /> </label> <input type="submit" class="search-submit" value="Search" /> </form> </div> </div> </div>  </div> </div> </div> </div> </header> <main id="primary" class="site-main has-default-container blog-page"> <div class="wp-block-malware-bytes-inner-header"> <div class="labs-sub-nav"> <div class="container"> <div class="labs-sub-nav__row"> <div class="labs-sub-nav__colum left"> <form role="search" method="get" class="search-form" action="https://www.malwarebytes.com/blog/"> <div class="labs-sub-nav__searchbar-wrap"> <input class="labs-sub-nav__search-input" type="text" name="s" placeholder="Search Labs"> <button class="labs-sub-nav__search-button" id="cta-labs-rightrail-search-submit-en" aria-label="Search in Malwarebytes"> <svg xmlns="http://www.w3.org/2000/svg" width="35px" height="35px" viewBox="0 0 24 24" fill="none"> <g clip-path="url(#clip0_15_152)"> <rect width="24" height="24" fill="none"></rect> <circle cx="10.5" cy="10.5" r="6.5" stroke="#0d3ecc" stroke-linejoin="round"></circle> <path d="M19.6464 20.3536C19.8417 20.5488 20.1583 20.5488 20.3536 20.3536C20.5488 20.1583 20.5488 19.8417 20.3536 19.6464L19.6464 20.3536ZM20.3536 19.6464L15.3536 14.6464L14.6464 15.3536L19.6464 20.3536L20.3536 19.6464Z" fill="#0d3ecc"></path> </g> <defs> <clipPath id="clip0_15_152"> <rect width="24" height="24" fill="#0d3ecc"></rect> </clipPath> </defs> </svg> </button> </div> </form> </div> <div class="labs-sub-nav__colum right"> <div class="subscribe-rss-wrp"> <a class="subscribe-btn" href="https://www.malwarebytes.com/newsletter?email=&source=labs" aria-label="Subscribe To Malwarebytes">SUBSCRIBE</a> <a href="https://www.malwarebytes.com/blog/feed/index.xml" target="_blank" aria-label="Feed Link"> <svg xmlns="http://www.w3.org/2000/svg" fill="#337ab7" width="25px" height="25px" viewBox="0 0 32 32" version="1.1"> <title>rss</title> <path d="M9.565 26.319c0-2.161-1.752-3.913-3.912-3.913s-3.913 1.752-3.913 3.913c0 2.161 1.752 3.913 3.913 3.913s3.912-1.752 3.912-3.913zM20.651 30.231h-5.543c0-7.383-5.985-13.368-13.368-13.368v-5.543c10.444 0 18.911 8.467 18.911 18.911v0zM24.563 30.231c0-12.605-10.218-22.823-22.823-22.823v-5.706c15.756 0 28.529 12.773 28.529 28.529h-5.706z"></path> </svg> </a> </div> <div class="social-wrp"> <a class="facebook-icon" href="https://www.facebook.com/Malwarebytes/" aria-label="Facebook Link" target="_blank"> <svg fill="#4a4a4a" width="30px" height="30px" viewBox="0 0 32 32" xmlns="http://www.w3.org/2000/svg"><path d="M21.95 5.005l-3.306-.004c-3.206 0-5.277 2.124-5.277 5.415v2.495H10.05v4.515h3.317l-.004 9.575h4.641l.004-9.575h3.806l-.003-4.514h-3.803v-2.117c0-1.018.241-1.533 1.566-1.533l2.366-.001.01-4.256z"/></svg> </a> <a class="twitter-icon" href="https://twitter.com/malwarebytes" aria-label="Twitter Link" target="_blank"> <svg xmlns="http://www.w3.org/2000/svg" width="20" height="20" viewBox="0 0 31.143 25.261"> <path id="Path_36" data-name="Path 36" d="M47.862,27.261c11.765,0,18.167-9.689,18.167-18.167V8.229a14.064,14.064,0,0,0,3.114-3.287A14.363,14.363,0,0,1,65.51,5.979a6.732,6.732,0,0,0,2.768-3.46A15.87,15.87,0,0,1,64.3,4.076,6.179,6.179,0,0,0,59.627,2a6.5,6.5,0,0,0-6.4,6.4A3.373,3.373,0,0,0,53.4,9.786,17.888,17.888,0,0,1,40.249,3.038a6.626,6.626,0,0,0-.865,3.287,6.874,6.874,0,0,0,2.768,5.364,5.833,5.833,0,0,1-2.941-.865h0A6.323,6.323,0,0,0,44.4,17.053a5.334,5.334,0,0,1-1.73.173,2.944,2.944,0,0,1-1.211-.173,6.555,6.555,0,0,0,6.056,4.5,13.063,13.063,0,0,1-7.959,2.768A4.79,4.79,0,0,1,38,24.146a16.331,16.331,0,0,0,9.862,3.114" transform="translate(-38 -2)" fill="#4a4a4a" fill-rule="evenodd"/> </svg> </a> <a class="linkedin-icon" href="https://www.linkedin.com/company/malwarebytes" aria-label="LinkedIn Link" target="_blank"> <svg fill="#4a4a4a" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="20px" height="20px" viewBox="0 0 512 512" xml:space="preserve"> <g id="7935ec95c421cee6d86eb22ecd125aef"> <path style="display: inline; fill-rule: evenodd; clip-rule: evenodd;" d="M116.504,500.219V170.654H6.975v329.564H116.504 L116.504,500.219z M61.751,125.674c38.183,0,61.968-25.328,61.968-56.953c-0.722-32.328-23.785-56.941-61.252-56.941 C24.994,11.781,0.5,36.394,0.5,68.722c0,31.625,23.772,56.953,60.53,56.953H61.751L61.751,125.674z M177.124,500.219 c0,0,1.437-298.643,0-329.564H286.67v47.794h-0.727c14.404-22.49,40.354-55.533,99.44-55.533 c72.085,0,126.116,47.103,126.116,148.333v188.971H401.971V323.912c0-44.301-15.848-74.531-55.497-74.531 c-30.254,0-48.284,20.38-56.202,40.08c-2.897,7.012-3.602,16.861-3.602,26.711v184.047H177.124L177.124,500.219z"> </path> </g> </svg> </a> </div> </div> </div> </div> </div> </div> <div class="container"> <div class="u-flex-columns"> <div class="u-flex-column u-flex-col-lg-8"> <article id="post-122044" class="post-122044 post type-post status-publish format-standard has-post-thumbnail hentry category-apple category-news category-threats tag-amos tag-atomic-stealer tag-editproai tag-information-stealers tag-lumma"> <div class="malwarebytes-post-article u-margin-t50 u-margin-b50 u-margin-t50@max-767 u-margin-b50@max-767 u-bg-white"> <div class="post-thumbnail"> <img width="1200" height="675" src="https://www.malwarebytes.com/wp-content/uploads/sites/2/2024/11/header_image_EditProAI.jpg?w=1200" class="attachment-post-thumbnail size-post-thumbnail wp-post-image" alt="EditProAI website" decoding="async" fetchpriority="high" srcset="https://www.malwarebytes.com/wp-content/uploads/sites/2/2024/11/header_image_EditProAI.jpg 1200w, https://www.malwarebytes.com/wp-content/uploads/sites/2/2024/11/header_image_EditProAI.jpg?resize=300,169 300w, https://www.malwarebytes.com/wp-content/uploads/sites/2/2024/11/header_image_EditProAI.jpg?resize=768,432 768w, https://www.malwarebytes.com/wp-content/uploads/sites/2/2024/11/header_image_EditProAI.jpg?resize=1024,576 1024w" sizes="(max-width: 1200px) 100vw, 1200px" /> </div> <header class="entry-header blog-head"> <div class="blog-list__category"> <a href="https://www.malwarebytes.com/blog/category/apple">Apple</a> | <a href="https://www.malwarebytes.com/blog/category/news">News</a> | <a href="https://www.malwarebytes.com/blog/category/threats">Threats</a> </div> <h1 class="entry-title u-margin-b10">Free AI editor lures in victims, installs information stealer instead on Windows and Mac</h1> <div class="entry-meta"> <span class="posted-on">Posted: November 19, 2024</span> <span class="byline"> by <span class="author vcard"><a class="url fn n" href="https://www.malwarebytes.com/blog/authors/metallicamvp">Pieter Arntz</a></span></span> </div> </header> <div class="entry-content"> <p>A large social media campaign was launched to promote a free Artificial Intelligence (AI) video editor. If the “free” part of that campaign sounds too good to be true, then that’s because it was.</p> <p>Instead of the video editor, users got information stealing malware. Lumma Stealer was installed on Windows machines and Atomic Stealer (AMOS) on Macs.</p> <p>The campaign to promote the AI video editor was active on several social media platforms, like X, Facebook, and YouTube…</p> <figure class="wp-block-image aligncenter size-full"><img decoding="async" width="420" height="271" src="https://www.malwarebytes.com/wp-content/uploads/sites/2/2024/11/Facebook_campaign.png" alt="Facebook post promising AI Video Magic in EditProAI" class="wp-image-122045" srcset="https://www.malwarebytes.com/wp-content/uploads/sites/2/2024/11/Facebook_campaign.png 420w, https://www.malwarebytes.com/wp-content/uploads/sites/2/2024/11/Facebook_campaign.png?resize=300,194 300w" sizes="(max-width: 420px) 100vw, 420px" /></figure> <p>…and had been active for quite a while. as you can see from this tweet.</p> <figure class="wp-block-image aligncenter size-full"><img decoding="async" width="606" height="871" src="https://www.malwarebytes.com/wp-content/uploads/sites/2/2024/11/X_campaign.png" alt="Tweet by EditProAi dated September 4" class="wp-image-122046" srcset="https://www.malwarebytes.com/wp-content/uploads/sites/2/2024/11/X_campaign.png 606w, https://www.malwarebytes.com/wp-content/uploads/sites/2/2024/11/X_campaign.png?resize=209,300 209w" sizes="(max-width: 606px) 100vw, 606px" /></figure> <p>The criminals seem to have used a lot of accounts to promote their “product” as you can see from this search on X.</p> <figure class="wp-block-image aligncenter size-full"><img loading="lazy" decoding="async" width="252" height="401" src="https://www.malwarebytes.com/wp-content/uploads/sites/2/2024/11/X_accounts.png" alt="List of X accounts all promoting EditProAI" class="wp-image-122047" srcset="https://www.malwarebytes.com/wp-content/uploads/sites/2/2024/11/X_accounts.png 252w, https://www.malwarebytes.com/wp-content/uploads/sites/2/2024/11/X_accounts.png?resize=189,300 189w" sizes="(max-width: 252px) 100vw, 252px" /></figure> <p>Some accounts were expressly created for this purpose, while others look like they may have been compromised accounts.</p> <figure class="wp-block-image aligncenter size-full"><img loading="lazy" decoding="async" width="552" height="693" src="https://www.malwarebytes.com/wp-content/uploads/sites/2/2024/11/YouTube_campaign.png" alt="YouTube video promoting EditProAI" class="wp-image-122048" srcset="https://www.malwarebytes.com/wp-content/uploads/sites/2/2024/11/YouTube_campaign.png 552w, https://www.malwarebytes.com/wp-content/uploads/sites/2/2024/11/YouTube_campaign.png?resize=239,300 239w" sizes="(max-width: 552px) 100vw, 552px" /></figure> <p>The campaign looks well organized, and looks so legitimate that it took quite a while before a researcher found out and tweeted about the threat.</p> <figure class="wp-block-image aligncenter size-full"><a href="https://x.com/g0njxa/status/1857485682299519034"><img loading="lazy" decoding="async" width="739" height="402" src="https://www.malwarebytes.com/wp-content/uploads/sites/2/2024/11/gonjxa_tweet.png" alt="Warning Tweet by g0njxa" class="wp-image-122049" srcset="https://www.malwarebytes.com/wp-content/uploads/sites/2/2024/11/gonjxa_tweet.png 739w, https://www.malwarebytes.com/wp-content/uploads/sites/2/2024/11/gonjxa_tweet.png?resize=300,163 300w" sizes="(max-width: 739px) 100vw, 739px" /></a></figure> <p>When interested individuals follow the links, they’ll end up on a professional looking website—exactly what you would expect.</p> <figure class="wp-block-image aligncenter size-full"><img loading="lazy" decoding="async" width="831" height="575" src="https://www.malwarebytes.com/wp-content/uploads/sites/2/2024/11/website.png" alt="EditProAI website" class="wp-image-122050" srcset="https://www.malwarebytes.com/wp-content/uploads/sites/2/2024/11/website.png 831w, https://www.malwarebytes.com/wp-content/uploads/sites/2/2024/11/website.png?resize=300,208 300w, https://www.malwarebytes.com/wp-content/uploads/sites/2/2024/11/website.png?resize=768,531 768w" sizes="(max-width: 831px) 100vw, 831px" /></figure> <p>But if they click the “GET NOW” button, they’ll download the information stealer and infect their device. The file is called “Edit-ProAI-Setup-newest_release.exe” for Windows, and “EditProAi_v.4.36.dmg” for macOS.</p> <p>Lumma is available through a Malware-as-a-Service (MaaS) model, where cybercriminals pay other cybercriminals for access to malicious software and its related infrastructure. Lumma steals information from cryptocurrency wallets and browser extensions, as well as two-factor authentication details. Lumma is often distributed via email campaigns, but nothing stops the cybercriminals from spreading it as a download for an AI editor, as they did here.</p> <p>AMOS makes money for its operators by finding and stealing valuable information on the computers it infects, such as credit card details, authentication cookies, passwords and cryptocurrency. Besides stealing data from the web browsers themselves, AMOS can also steal data from browser extensions (plugins).</p> <h2 class="wp-block-heading" id="h-what-if-you-installed-one-of-these">What if you installed one of these?</h2> <p>Both stealers are after login credentials and financial information, so there are a few things you’ll need to do.</p> <ul> <li>Monitor your accounts. Banking and cryptocurrency information is a prime target for these information stealers, so check your accounts and monitor them closely.</li> <li>Change all your passwords starting with the important ones, and if you’re not using a password manager already, now might be a good time to get one. It can help you create and store strong passwords.</li> <li>Enable <a href="https://www.malwarebytes.com/glossary/multi-factor-authentication-mfa">multi-factor-authentication (MFA)</a> on all your important accounts.</li> <li>Log out of all your important accounts on infected devices. These information stealers are capable of <a href="https://www.malwarebytes.com/blog/news/2024/11/warning-hackers-could-take-over-your-email-account-by-stealing-cookies-even-if-you-have-mfa">taking over some accounts by stealing cookies</a>, even if you have MFA enabled.</li> </ul> <p><a href="https://www.malwarebytes.com/solutions/free-antivirus">Malwarebytes for Windows</a> and <a href="https://www.malwarebytes.com/mac">Malwarebytes for Mac</a> can detect the information stealers, and they block the EditProAI websites.</p> </div> </div> </article> <div class="share-section"> <p><strong>SHARE THIS ARTICLE</strong></p> <a class="socicon-facebook" target="_blank" href="http://www.facebook.com/sharer.php?u=https://www.malwarebytes.com/blog/news/2024/11/free-ai-editor-lures-in-victims-installs-information-stealer-instead-on-windows-and-mac" aria-label="Share this post on Facebook"> <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="24px" height="24px" viewBox="-5 0 20 20" version="1.1"> <g stroke="none" stroke-width="1" fill="none" fill-rule="evenodd"> <g transform="translate(-385.000000, -7399.000000)" fill="#414042"> <g transform="translate(56.000000, 160.000000)"> <path d="M335.821282,7259 L335.821282,7250 L338.553693,7250 L339,7246 L335.821282,7246 L335.821282,7244.052 C335.821282,7243.022 335.847593,7242 337.286884,7242 L338.744689,7242 L338.744689,7239.14 C338.744689,7239.097 337.492497,7239 336.225687,7239 C333.580004,7239 331.923407,7240.657 331.923407,7243.7 L331.923407,7246 L329,7246 L329,7250 L331.923407,7250 L331.923407,7259 L335.821282,7259 Z" id="facebook-[#176]"> </path> </g> </g> </g> </svg> </a> <a class="socicon-twitter" target="_blank" href="https://twitter.com/intent/tweet?text=Free+AI+editor+lures+in+victims%2C+installs+information+stealer+instead+on+Windows+and+Mac+https%3A%2F%2Fwww.malwarebytes.com%2Fblog%2Fnews%2F2024%2F11%2Ffree-ai-editor-lures-in-victims-installs-information-stealer-instead-on-windows-and-mac&via=Malwarebytes" aria-label="Share this post on Twitter"> <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="24px" height="24px" viewBox="0 -2 20 20" version="1.1"> <g stroke="none" stroke-width="1" fill="none" fill-rule="evenodd"> <g transform="translate(-60.000000, -7521.000000)" fill="#414042"> <g transform="translate(56.000000, 160.000000)"> <path d="M10.29,7377 C17.837,7377 21.965,7370.84365 21.965,7365.50546 C21.965,7365.33021 21.965,7365.15595 21.953,7364.98267 C22.756,7364.41163 23.449,7363.70276 24,7362.8915 C23.252,7363.21837 22.457,7363.433 21.644,7363.52751 C22.5,7363.02244 23.141,7362.2289 23.448,7361.2926 C22.642,7361.76321 21.761,7362.095 20.842,7362.27321 C19.288,7360.64674 16.689,7360.56798 15.036,7362.09796 C13.971,7363.08447 13.518,7364.55538 13.849,7365.95835 C10.55,7365.79492 7.476,7364.261 5.392,7361.73762 C4.303,7363.58363 4.86,7365.94457 6.663,7367.12996 C6.01,7367.11125 5.371,7366.93797 4.8,7366.62489 L4.8,7366.67608 C4.801,7368.5989 6.178,7370.2549 8.092,7370.63591 C7.488,7370.79836 6.854,7370.82199 6.24,7370.70483 C6.777,7372.35099 8.318,7373.47829 10.073,7373.51078 C8.62,7374.63513 6.825,7375.24554 4.977,7375.24358 C4.651,7375.24259 4.325,7375.22388 4,7375.18549 C5.877,7376.37088 8.06,7377 10.29,7376.99705" id="twitter-[#154]"> </path></g></g></g> </svg> </a> <a class="socicon-linkedin" target="_blank" href="https://www.linkedin.com/shareArticle?mini=true&url=https://www.malwarebytes.com/blog/news/2024/11/free-ai-editor-lures-in-victims-installs-information-stealer-instead-on-windows-and-mac&summary=&source=" aria-label="Share this post on LinkedIn"> <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" fill="#414042" version="1.1" width="24px" height="24px" viewBox="0 0 512 512" xml:space="preserve"> <g> <path style="display: inline; fill-rule: evenodd; clip-rule: evenodd;" d="M116.504,500.219V170.654H6.975v329.564H116.504 L116.504,500.219z M61.751,125.674c38.183,0,61.968-25.328,61.968-56.953c-0.722-32.328-23.785-56.941-61.252-56.941 C24.994,11.781,0.5,36.394,0.5,68.722c0,31.625,23.772,56.953,60.53,56.953H61.751L61.751,125.674z M177.124,500.219 c0,0,1.437-298.643,0-329.564H286.67v47.794h-0.727c14.404-22.49,40.354-55.533,99.44-55.533 c72.085,0,126.116,47.103,126.116,148.333v188.971H401.971V323.912c0-44.301-15.848-74.531-55.497-74.531 c-30.254,0-48.284,20.38-56.202,40.08c-2.897,7.012-3.602,16.861-3.602,26.711v184.047H177.124L177.124,500.219z"> </path> </g> </svg> </a> </div> <div id="disqus_thread"></div> <div class="related-articles-wrap"> <h4>RELATED ARTICLES</h4> <div class="related-articles-main"> <div class="related-article"> <div class="large-card"> <div class="thumb"> <a href="https://www.malwarebytes.com/blog/news/2024/11/medical-testing-company-lifelabs-failed-to-protect-customer-data-report-finds"> <img width="150" height="150" src="https://www.malwarebytes.com/wp-content/uploads/sites/2/2024/11/LifeLabs_logo.jpg?w=150&h=150&crop=1" class="attachment-thumbnail size-thumbnail wp-post-image" alt="LifeLabs logo" loading="lazy" /> </a> </div> <div class="blog-info"> <div class="blog-list__category"> <a href="https://www.malwarebytes.com/blog/category/news">News</a> | <a href="https://www.malwarebytes.com/blog/category/privacy">Privacy</a> </div> <h2><a href="https://www.malwarebytes.com/blog/news/2024/11/medical-testing-company-lifelabs-failed-to-protect-customer-data-report-finds">Medical testing company LifeLabs failed to protect customer data, report finds</a></h2> </div> </div> <p class="blog-excerpt">November 27, 2024 - LifeLabs managed to hold up a report about a ransomware incident in court for four years. It's now been published.</p> <div class="blog-action"> <a class="continue-read" href="https://www.malwarebytes.com/blog/news/2024/11/medical-testing-company-lifelabs-failed-to-protect-customer-data-report-finds">CONTINUE READING</a> <a class="num-comments" href="https://www.malwarebytes.com/blog/news/2024/11/medical-testing-company-lifelabs-failed-to-protect-customer-data-report-finds#disqus_thread" data-disqus-identifier="123860"> 0 Comments</a> </div> </div> <div class="related-article"> <div class="large-card"> <div class="thumb"> <a href="https://www.malwarebytes.com/blog/news/2024/11/explained-the-microsoft-connected-experiences-controversy"> <img width="150" height="150" src="https://www.malwarebytes.com/wp-content/uploads/sites/2/2024/11/Office_apps_logos.jpg?w=150&h=150&crop=1" class="attachment-thumbnail size-thumbnail wp-post-image" alt="Office apps offer connected experiences" loading="lazy" /> </a> </div> <div class="blog-info"> <div class="blog-list__category"> <a href="https://www.malwarebytes.com/blog/category/news">News</a> | <a href="https://www.malwarebytes.com/blog/category/privacy">Privacy</a> </div> <h2><a href="https://www.malwarebytes.com/blog/news/2024/11/explained-the-microsoft-connected-experiences-controversy">Explained: the Microsoft connected experiences controversy</a></h2> </div> </div> <p class="blog-excerpt">November 26, 2024 - Microsoft connected experiences have been the subject of heated online discussions. So what are they, and do they train AI with my data?</p> <div class="blog-action"> <a class="continue-read" href="https://www.malwarebytes.com/blog/news/2024/11/explained-the-microsoft-connected-experiences-controversy">CONTINUE READING</a> <a class="num-comments" href="https://www.malwarebytes.com/blog/news/2024/11/explained-the-microsoft-connected-experiences-controversy#disqus_thread" data-disqus-identifier="123636"> 0 Comments</a> </div> </div> <div class="related-article"> <div class="large-card"> <div class="thumb"> <a href="https://www.malwarebytes.com/blog/news/2024/11/spotify-audible-and-amazon-used-to-push-dodgy-forex-trading-sites-and-more"> <img width="150" height="150" src="https://www.malwarebytes.com/wp-content/uploads/sites/2/2024/11/forex_trading_graph.jpg?w=150&h=150&crop=1" class="attachment-thumbnail size-thumbnail wp-post-image" alt="forex trading graph" loading="lazy" /> </a> </div> <div class="blog-info"> <div class="blog-list__category"> <a href="https://www.malwarebytes.com/blog/category/news">News</a> | <a href="https://www.malwarebytes.com/blog/category/scams">Scams</a> </div> <h2><a href="https://www.malwarebytes.com/blog/news/2024/11/spotify-audible-and-amazon-used-to-push-dodgy-forex-trading-sites-and-more">Spotify, Audible, and Amazon used to push dodgy forex trading sites and more</a></h2> </div> </div> <p class="blog-excerpt">November 25, 2024 - Cybercriminals are spamming content platforms like Spotify and Amazon with cracks, keygens, and forex trading platforms. We explain why.</p> <div class="blog-action"> <a class="continue-read" href="https://www.malwarebytes.com/blog/news/2024/11/spotify-audible-and-amazon-used-to-push-dodgy-forex-trading-sites-and-more">CONTINUE READING</a> <a class="num-comments" href="https://www.malwarebytes.com/blog/news/2024/11/spotify-audible-and-amazon-used-to-push-dodgy-forex-trading-sites-and-more#disqus_thread" data-disqus-identifier="122797"> 0 Comments</a> </div> </div> <div class="related-article"> <div class="large-card"> <div class="thumb"> <a href="https://www.malwarebytes.com/blog/news/2024/11/hilariously-insecure-andrew-tates-the-real-world-breached-800000-users-affected"> <img width="150" height="150" src="https://www.malwarebytes.com/wp-content/uploads/sites/2/2024/11/The_RealWorld_logo.jpg?w=150&h=150&crop=1" class="attachment-thumbnail size-thumbnail wp-post-image" alt="The Real World logo" loading="lazy" /> </a> </div> <div class="blog-info"> <div class="blog-list__category"> <a href="https://www.malwarebytes.com/blog/category/news">News</a> | <a href="https://www.malwarebytes.com/blog/category/privacy">Privacy</a> </div> <h2><a href="https://www.malwarebytes.com/blog/news/2024/11/hilariously-insecure-andrew-tates-the-real-world-breached-800000-users-affected">“Hilariously insecure”: Andrew Tate’s The Real World breached, 800,000 users affected</a></h2> </div> </div> <p class="blog-excerpt">November 25, 2024 - Hacktivists have breached Andrew Tate's learning platform The Real World and obtained 794,000 usernames for current and former members, as well as 324,382 email addresses of former clients.</p> <div class="blog-action"> <a class="continue-read" href="https://www.malwarebytes.com/blog/news/2024/11/hilariously-insecure-andrew-tates-the-real-world-breached-800000-users-affected">CONTINUE READING</a> <a class="num-comments" href="https://www.malwarebytes.com/blog/news/2024/11/hilariously-insecure-andrew-tates-the-real-world-breached-800000-users-affected#disqus_thread" data-disqus-identifier="123284"> 0 Comments</a> </div> </div> <div class="related-article"> <div class="large-card"> <div class="thumb"> <a href="https://www.malwarebytes.com/blog/news/2024/11/a-week-in-security-november-18-november-24"> <img width="150" height="150" src="https://www.malwarebytes.com/wp-content/uploads/sites/2/2023/11/Week_in_Security.jpg?w=150&h=150&crop=1" class="attachment-thumbnail size-thumbnail wp-post-image" alt="week in security" loading="lazy" /> </a> </div> <div class="blog-info"> <div class="blog-list__category"> <a href="https://www.malwarebytes.com/blog/category/news">News</a> </div> <h2><a href="https://www.malwarebytes.com/blog/news/2024/11/a-week-in-security-november-18-november-24">A week in security (November 18 – November 24)</a></h2> </div> </div> <p class="blog-excerpt">November 25, 2024 - A list of topics we covered in the week of November 18 to November 24 of 2024</p> <div class="blog-action"> <a class="continue-read" href="https://www.malwarebytes.com/blog/news/2024/11/a-week-in-security-november-18-november-24">CONTINUE READING</a> <a class="num-comments" href="https://www.malwarebytes.com/blog/news/2024/11/a-week-in-security-november-18-november-24#disqus_thread" data-disqus-identifier="123266"> 0 Comments</a> </div> </div> </div> </div> </div> <div class="u-flex-column u-flex-col-lg-4"> <div class="malwarebytes-sidebar u-margin-t50@max-767 u-margin-t50 u-margin-b20"> <div id="right-rail"> <div class="author-card blog-author"> <div class="heading"> <p>ABOUT THE AUTHOR</p> </div> <div class="card-inner"> <div class="author-img"> <a class="author-img" href="https://www.malwarebytes.com/blog/authors/metallicamvp"> <img alt="Pieter Arntz" src="https://secure.gravatar.com/avatar/4cc4cefdb9f9107d91a645730cdbccaf?s=300&d=identicon&r=g" srcset="https://secure.gravatar.com/avatar/4cc4cefdb9f9107d91a645730cdbccaf?s=300&d=identicon&r=g" class="avatar avatar-150 photo" height="150" width="150" loading="lazy"> </a> </div> <div class="content"> <p class="details"> <span class="name"><a href="https://www.malwarebytes.com/blog/authors/metallicamvp">Pieter Arntz</a></span> <a class="social socicon-twitter" target="_blank" href="https://twitter.com/MetallicaMVP"> <img src="https://www.malwarebytes.com/wp-content/themes/malwarebytes/assets/src/images/twitter-blue.svg" alt="twitter-icon"> </a> </p> <span class="title">Malware Intelligence Researcher</span> <p class="desc">Was a Microsoft MVP in consumer security for 12 years running. Can speak four languages. Smells of rich mahogany and leather-bound books.</p> </div> </div> </div> </div> </div> </div> </div> </div> <div class="wp-block-group alignfull labs-links-block has-background has-global-padding is-layout-constrained wp-container-core-group-is-layout-4 wp-block-group-is-layout-constrained" style="border-style:none;border-width:0px;background-color:#f7fbff;padding-top:var(--wp--preset--spacing--60);padding-right:var(--wp--preset--spacing--70);padding-bottom:var(--wp--preset--spacing--60);padding-left:var(--wp--preset--spacing--70)"> <div class="wp-block-columns is-layout-flex wp-container-core-columns-is-layout-7 wp-block-columns-is-layout-flex" style="margin-top:0;margin-bottom:0;padding-top:0;padding-right:0;padding-bottom:0;padding-left:0"> <div class="wp-block-column is-layout-flow wp-block-column-is-layout-flow"> <figure class="wp-block-image aligncenter size-large"><a href="https://www.malwarebytes.com/blog/authors"><img loading="lazy" decoding="async" width="58" height="58" src="https://www.malwarebytes.com/wp-content/uploads/sites/2/2023/08/Screenshot-2023-08-24-at-6.14.19-PM.png?w=58" alt="Contributors icon" class="wp-image-11363"/></a></figure> <p class="has-text-align-center"><a href="https://www.malwarebytes.com/blog/authors">Contributors</a></p> </div> <div class="wp-block-column is-layout-flow wp-block-column-is-layout-flow"> <figure class="wp-block-image aligncenter size-large"><a href="https://www.malwarebytes.com/blog/threats"><img loading="lazy" decoding="async" width="56" height="57" src="https://www.malwarebytes.com/wp-content/uploads/sites/2/2023/08/Screenshot-2023-08-24-at-6.14.55-PM.png?w=56" alt="Threat Center icon" class="wp-image-11362"/></a></figure> <p class="has-text-align-center"><a href="https://www.malwarebytes.com/blog/threats">Threat Center</a></p> </div> <div class="wp-block-column is-layout-flow wp-block-column-is-layout-flow"> <figure class="wp-block-image aligncenter size-large"><a href="https://www.malwarebytes.com/blog/podcast"><img loading="lazy" decoding="async" width="56" height="57" src="https://www.malwarebytes.com/wp-content/uploads/sites/2/2023/08/Screenshot-2023-08-24-at-6.15.19-PM.png?w=56" alt="Podcasts icon" class="wp-image-11361"/></a></figure> <p class="has-text-align-center"><a href="https://www.malwarebytes.com/blog/category/podcast">Podcast</a></p> </div> <div class="wp-block-column is-layout-flow wp-block-column-is-layout-flow"> <figure class="wp-block-image aligncenter size-large"><a href="https://www.malwarebytes.com/glossary"><img loading="lazy" decoding="async" width="56" height="57" src="https://www.malwarebytes.com/wp-content/uploads/sites/2/2023/08/Screenshot-2023-08-24-at-6.15.36-PM.png?w=56" alt="Glossary icon" class="wp-image-11360"/></a></figure> <p class="has-text-align-center"><a href="https://www.malwarebytes.com/glossary">Glossary</a></p> </div> <div class="wp-block-column is-layout-flow wp-block-column-is-layout-flow"> <figure class="wp-block-image aligncenter size-large"><a href="https://www.malwarebytes.com/blog/tech-support-scams"><img loading="lazy" decoding="async" width="56" height="57" src="https://www.malwarebytes.com/wp-content/uploads/sites/2/2023/08/Screenshot-2023-08-24-at-6.15.51-PM.png?w=56" alt="Scams icon" class="wp-image-11359"/></a></figure> <p class="has-text-align-center"><a href="https://www.malwarebytes.com/blog/news/2016/05/tech-support-scams">Scams</a></p> </div> </div> </div> </main> <script> var disqus_config = function () { this.page.url = 'https://www.malwarebytes.com/blog/news/2024/11/free-ai-editor-lures-in-victims-installs-information-stealer-instead-on-windows-and-mac'; this.page.identifier = '122044'; }; (function() { var d = document, s = d.createElement('script'); s.src = 'https://malwarebytesunpacked.disqus.com/embed.js'; s.setAttribute('data-timestamp', +new Date()); (d.head || d.body).appendChild(s); })(); </script> <span id="kadence-conversion-end-of-content"></span> <footer id="colophon" class="site-footer"> <div class="site-footer__top"> <div class="container"> <div class="site-footer__info"> <a class="footer-logo" href="https://www.malwarebytes.com/" rel="home" id="cta-navbar-footer-company-logo-en"> <img width="1240" src="https://www.malwarebytes.com/wp-content/uploads/sites/2/2023/07/footer-logo-1.svg" class="attachment-full size-full" alt="MalwareBytes-Footer-Logo" width="150" height="46" decoding="async" loading="lazy" /> </a> <p class="site-footer__description"> Cyberprotection for every one. </p> </div> <div class="site-footer__row u-flex-columns"> <div class="u-flex-column u-flex-col-lg-2 u-flex-col-sm-6"> <p style="font-style:normal;font-weight:500">COMPUTER SECURITY</p> <div class="menu-footer-computer-security-container"><ul id="menu-footer-computer-security" class="menu"><li id="menu-item-119904" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-119904"><a href="https://www.malwarebytes.com/rootkit" id="cta-mb-footer-rootkit-scanner">Rootkit Scanner</a></li> <li id="menu-item-119905" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-119905"><a href="https://www.malwarebytes.com/solutions/trojan-scanner" id="cta-mb-footer-trojan-scanner">Trojan Scanner</a></li> <li id="menu-item-119906" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-119906"><a href="https://www.malwarebytes.com/solutions/free-antivirus" id="cta-mb-footer-free-antivirus">Free Antivirus</a></li> <li id="menu-item-119907" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-119907"><a href="https://www.malwarebytes.com/solutions/virus-scanner" id="cta-mb-footer-virus-scan">Free Virus Scan</a></li> <li id="menu-item-119908" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-119908"><a href="https://www.malwarebytes.com/premium" id="cta-mb-footer-premium-protection">Premium protection</a></li> </ul></div> <p style="font-style:normal;font-weight:500">MOBILE SECURITY</p> <div class="wp-block-group has-global-padding is-layout-constrained wp-block-group-is-layout-constrained" style="padding-bottom:var(--wp--preset--spacing--40)"><div class="widget widget_nav_menu"><div class="menu-footer-android-security-container"><ul id="menu-footer-android-security" class="menu"><li id="menu-item-119910" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-119910"><a href="https://www.malwarebytes.com/android-antivirus" id="cta-mb-footer-android-security">Antivirus for Android</a></li> </ul></div></div> <figure class="wp-block-image size-large"><a href="https://go.onelink.me/app/516cebeb"><img loading="lazy" decoding="async" width="135" height="40" src="https://www.malwarebytes.com/wp-content/uploads/sites/2/2023/08/google_play_store_button.png?w=135" alt="google play store" class="wp-image-6309"/></a></figure> </div> <div class="wp-block-group has-global-padding is-layout-constrained wp-block-group-is-layout-constrained"><div class="widget widget_nav_menu"><div class="menu-footer-ios-security-container"><ul id="menu-footer-ios-security" class="menu"><li id="menu-item-119913" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-119913"><a href="https://www.malwarebytes.com/ios" id="cta-mb-footer-ios-security">iOS Security and Spam Blocker</a></li> </ul></div></div> <figure class="wp-block-image size-large"><a href="https://apps.apple.com/US/app/id1327105431?mt=8"><img loading="lazy" decoding="async" width="120" height="40" src="https://www.malwarebytes.com/wp-content/uploads/sites/2/2023/08/apple_app_store_button_dark.png?w=120" alt="apple store icon" class="wp-image-6313"/></a></figure> </div> </div> <div class="u-flex-column u-flex-col-lg-2 u-flex-col-sm-6"> <p style="font-style:normal;font-weight:500">PRIVACY PROTECTION</p> <div class="menu-footer-privacy-protection-container"><ul id="menu-footer-privacy-protection" class="menu"><li id="menu-item-119921" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-119921"><a href="https://www.malwarebytes.com/vpn" id="cta-mb-footer-privacy-vpn">Privacy VPN (Virtual Private Network)</a></li> <li id="menu-item-120239" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-120239"><a href="https://www.malwarebytes.com/digital-footprint" id="cta-mb-footer-digital-footprint-scan">Digital Footprint Scan</a></li> <li id="menu-item-119923" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-119923"><a href="https://www.malwarebytes.com/solutions/dark-web-monitoring" id="cta-mb-footer-dark-web-monitoring">Dark Web Monitoring</a></li> <li id="menu-item-119924" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-119924"><a href="https://www.malwarebytes.com/adwcleaner" id="cta-mb-footer-adware-removal-adwcleaner">Adware Removal</a></li> <li id="menu-item-119925" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-119925"><a href="https://www.malwarebytes.com/browserguard" id="cta-mb-footer-adblocker-browserguard">Ad Blocker</a></li> </ul></div> <p style="font-style:normal;font-weight:500">IDENTITY PROTECTION</p> <div class="menu-footer-identity-protection-container"><ul id="menu-footer-identity-protection" class="menu"><li id="menu-item-120211" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-120211"><a href="https://www.malwarebytes.com/identity-theft-protection" id="cta-mb-footer-identity-monitoring-alerts">Identity Monitoring & Alerts</a></li> <li id="menu-item-120212" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-120212"><a href="https://www.malwarebytes.com/identity-theft-protection" id="cta-mb-footer-credit-monitoring-reporting">Credit Monitoring & Reporting</a></li> <li id="menu-item-120213" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-120213"><a href="https://www.malwarebytes.com/identity-theft-protection" id="cta-mb-footer-identity-recovery-resolution">Identity Recovery & Resolution</a></li> <li id="menu-item-120214" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-120214"><a href="https://www.malwarebytes.com/identity-theft-protection" id="cta-mb-footer-identity-theft-insurance">ID Theft Insurance</a></li> <li id="menu-item-120215" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-120215"><a href="https://www.malwarebytes.com/personal-data-remover" id="cta-mb-footer-personal-data-remover-pdr">Personal Data Remover</a></li> </ul></div> </div> <div class="u-flex-column u-flex-col-lg-3 u-flex-col-sm-6"> <p style="font-style:normal;font-weight:500">LEARN ABOUT CYBERSECURITY</p> <div class="menu-footer-learn-about-cybersecurity-container"><ul id="menu-footer-learn-about-cybersecurity" class="menu"><li id="menu-item-120251" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-120251"><a href="https://www.malwarebytes.com/blog">Blog</a></li> <li id="menu-item-120244" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-120244"><a href="https://www.malwarebytes.com/social-engineering">Social Engineering</a></li> <li id="menu-item-120220" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-120220"><a href="https://www.malwarebytes.com/phishing">Phishing</a></li> <li id="menu-item-120221" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-120221"><a href="https://www.malwarebytes.com/solutions/ransomware-protection">Ransomware</a></li> <li id="menu-item-120246" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-120246"><a href="https://www.malwarebytes.com/malware">Malware</a></li> <li id="menu-item-120222" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-120222"><a href="https://www.malwarebytes.com/cybersecurity/basics/antivirus">Antivirus</a></li> <li id="menu-item-120223" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-120223"><a href="https://www.malwarebytes.com/what-is-vpn">What is a VPN?</a></li> <li id="menu-item-120224" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-120224"><a href="https://www.malwarebytes.com/doxxing">Doxxing</a></li> </ul></div> <p style="font-style:normal;font-weight:500">PARTNER WITH MALWAREBYTES</p> <div class="menu-footer-partner-with-mb-container"><ul id="menu-footer-partner-with-mb" class="menu"><li id="menu-item-120226" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-120226"><a href="https://www.malwarebytes.com/techbench" id="cta-mb-footer-computer-repair-techbench">Computer Repair</a></li> <li id="menu-item-120227" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-120227"><a href="https://www.malwarebytes.com/affiliates" id="cta-mb-footer-affiliates">Affiliates</a></li> </ul></div> <p style="font-style:normal;font-weight:500">ADDRESS</p> <p class="address-text address-global">One Albert Quay<br>2nd Floor<br>Cork T12 X8N6<br>Ireland</p> <p class="address-text address-usa-ca hidden">3979 Freedom Circle<br>12th Floor<br>Santa Clara, CA 95054</p> </div> <div class="site-footer__col u-flex-column u-flex-col-lg-2 u-flex-col-sm-6"> <p style="font-style:normal;font-weight:500">ABOUT MALWAREBYTES</p> <div class="menu-footer-about-mb-container"><ul id="menu-footer-about-mb" class="menu"><li id="menu-item-120230" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-120230"><a href="https://www.malwarebytes.com/jobs" id="cta-mb-footer-careers">Careers</a></li> <li id="menu-item-120231" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-120231"><a href="https://www.malwarebytes.com/press/" id="cta-mb-footer-press">News and Press</a></li> <li id="menu-item-120232" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-120232"><a href="https://www.malwarebytes.com/secure" id="cta-mb-footer-vulnerability-discolsure">Vulnerability Disclosure</a></li> <li id="menu-item-120233" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-120233"><a href="https://forums.malwarebytes.com/forum/122-false-positives" id="cta-mb-footer-false-positive">False Positive Report</a></li> <li id="menu-item-120234" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-120234"><a href="https://forums.malwarebytes.com/" id="cta-mb-footer-forums">Forums</a></li> </ul></div> <p style="font-style:normal;font-weight:500">GET HELP</p> <div class="menu-footer-get-help-container"><ul id="menu-footer-get-help" class="menu"><li id="menu-item-120236" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-120236"><a href="https://support.malwarebytes.com/hc/en-us">Help Center</a></li> <li id="menu-item-120237" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-120237"><a href="https://my.malwarebytes.com">Sign in to MyAccount</a></li> </ul></div> <div class="wp-block-group has-background has-global-padding is-layout-constrained wp-block-group-is-layout-constrained" style="background-color:#ffffff12;padding-top:var(--wp--preset--spacing--20);padding-right:var(--wp--preset--spacing--20);padding-bottom:var(--wp--preset--spacing--20);padding-left:var(--wp--preset--spacing--20)"> <figure class="wp-block-image size-large"><a href="https://www.threatdown.com/?utm_campaign=mwb-referral&utm_source=malwarebytes.com&utm_medium=referral&utm_content=cta-mb-footer-threatdown-logo"><img decoding="async" src="https://www.malwarebytes.com/wp-content/uploads/sites/2/2023/11/ThreatDown_Horizontal_Reverse-2-2.svg?w=1024" alt="Threatdown Logo" class="wp-image-98222"/></a></figure> <div class="widget widget_nav_menu"><div class="menu-footer-threatdown-container"><ul id="menu-footer-threatdown" class="menu"><li id="menu-item-120248" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-120248"><a href="https://www.threatdown.com/?utm_campaign=mwb-referral&utm_source=malwarebytes.com&utm_medium=referral&utm_content=cta-mb-footer-threatdown-endpoint-solution" id="cta-mb-footer-threatdown-endpoint-security-solution">Business Endpoint Security Solutions</a></li> <li id="menu-item-120249" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-120249"><a href="https://www.threatdown.com/partner-program/msp/?utm_campaign=mwb-referral&utm_source=malwarebytes.com&utm_medium=referral&utm_content=cta-en-us-footer-partner-msp" id="https://www.threatdown.com/partner-program/msp/">Managed Service Provider (MSP) Program</a></li> </ul></div></div></div> </div> <div class="site-footer__connect u-flex-column u-flex-col-lg-3"> <ul class="site-footer__social-icons u-flex-center"> <li> <a href="https://twitter.com/malwarebytes" id="cta-footer-social-twitter-en" class="social socicon-twitter" target="_blank" rel="noopener"> <img width="1240" src="https://www.malwarebytes.com/wp-content/uploads/sites/2/2024/01/x-logo.svg?w=1240" class="attachment-social-icon-image size-social-icon-image" alt="Twitter icon" width="30" height="20" decoding="async" loading="lazy" /> <span class="screen-reader-text">Twitter</span> </a> </li> <li> <a href="https://www.facebook.com/Malwarebytes" id="cta-footer-social-facebook-en" class="social socicon-facebook" target="_blank" rel="noopener"> <img width="1240" src="https://www.malwarebytes.com/wp-content/uploads/sites/2/2023/07/icon-facebook.svg?w=1240" class="attachment-social-icon-image size-social-icon-image" alt="Icon facebook" width="30" height="20" decoding="async" loading="lazy" /> <span class="screen-reader-text">Facebook</span> </a> </li> <li> <a href="https://www.linkedin.com/company/malwarebytes" id="cta-footer-social-linkedin-en" class="social socicon-linkedin" target="_blank" rel="noopener"> <img width="1240" src="https://www.malwarebytes.com/wp-content/uploads/sites/2/2023/07/icon-linkedin.svg?w=1240" class="attachment-social-icon-image size-social-icon-image" alt="Icon Linkedin" width="30" height="20" decoding="async" loading="lazy" /> <span class="screen-reader-text">LinkedIn</span> </a> </li> <li> <a href="https://www.youtube.com/user/Malwarebytes" id="cta-footer-social-youtube-en" class="social socicon-youtube" target="_blank" rel="noopener"> <img width="1240" src="https://www.malwarebytes.com/wp-content/uploads/sites/2/2023/07/icon-youtube.svg?w=1240" class="attachment-social-icon-image size-social-icon-image" alt="Icon youtube" width="30" height="20" decoding="async" loading="lazy" /> <span class="screen-reader-text">Youtube</span> </a> </li> <li> <a href="https://www.instagram.com/malwarebytesofficial" id="cta-footer-social-instagram-en" class="social socicon-instagram-v2" target="_blank" rel="noopener"> <img width="1240" src="https://www.malwarebytes.com/wp-content/uploads/sites/2/2023/07/icon-instagram.svg?w=1240" class="attachment-social-icon-image size-social-icon-image" alt="Icon instagram" width="30" height="20" decoding="async" loading="lazy" /> <span class="screen-reader-text">Instagram</span> </a> </li> </ul> <div class="site-footer__newsletter"> <h2>Cybersecurity info you can’t live without</h2> <p>Want to stay informed on the latest news in cybersecurity? Sign up for our newsletter and learn how to protect your computer from threats.</p> <form action="https://www.malwarebytes.com/newsletter/" class="newsletter-form"> <div class="newsletter-form__inline"> <label>Email Address</label> <input type="email" name="email" id="cta-footer-newsletter-input-email-en" placeholder="Email Address" required class="newsletter-form__email"> <input type="hidden" class="newsletter-form__pageurl" value="https://www.malwarebytes.com/blog/news/2024/11/free-ai-editor-lures-in-victims-installs-information-stealer-instead-on-windows-and-mac"> <input name="source" type="hidden" value=""> <input type="submit" value="Sign Up" class="newsletter-form__btn" id="cta-footer-newsletter-subscribe-email-en"> </div> <div class="newsletter-form__validate hidden"> <span></span> </div> </form> </div> </div> </div> </div> </div> <div class="site-footer__bottom"> <div class="container"> <div class="u-flex-columns"> <aside data-wg-notranslate="" class="country-selector weglot-dropdown close_outside_click closed weglot-shortcode wg-" tabindex="0" aria-expanded="false" aria-label="Language selected: English"><ul role="none"></ul></aside> <div class="u-flex-column u-flex-col-lg-9 site-footer__bottom-right"> <ul id="menu-footer-bottom-menu" class="footer-bottom-menu u-flex-center"><li id="menu-item-2936" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2936"><a href="https://www.malwarebytes.com/legal" id="cta-en-us-footernavigation-legal-_legal-click">Legal</a></li> <li id="menu-item-2937" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2937"><a href="https://www.malwarebytes.com/legal/privacy-policy" id="cta-en-us-footernavigation-legal-_legal_privacy_policy-click">Privacy</a></li> <li id="menu-item-2940" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2940"><a href="https://www.malwarebytes.com/tos" id="cta-en-us-footernavigation-legal-_tos-click">Terms of Service</a></li> <li id="menu-item-2938" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2938"><a href="https://www.malwarebytes.com/accessibility" id="cta-en-us-footernavigation-legal-_accessibility-click">Accessibility</a></li> <li id="menu-item-116900" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-116900"><a href="https://www.malwarebytes.com/impressum">Imprint</a></li> </ul> <p class="site-footer__copyright"> © 2024 All Rights Reserved </p> </div> </div> </div> </div> </footer> </div> <script id="dsq-count-scr" src="https://malwarebytesunpacked.disqus.com/count.js" async></script> <script> var global_variables = { when: '7/3/2023 2:14:31 PM', site : { language: 'en', country: 'us', origin: 'https://www.malwarebytes.com', phoneNumbers: { 'US': {'view':'+1-800-520-2796','call':'18005202796'}, 'GB': {'view':'+44 (800) 368-8486','call':'448003688486'}, 'FR': {'view':'+33 (800) 909-009','call':'33800909009'}, 'ES': {'view':'+34 (900) 823-509','call':'34900823509'}, 'DE': {'view':'+49 (800) 723-4800','call':'498007234800'}, 'IT': {'view':'+39 (800) 972-511','call':'39800972511'}, 'SG': {'view':'+65 6813-2150','call':'6568132150'}, 'AU': {'view':'1800-745-824','call':'1800745824'}, 'NZ': {'view':'0800-446-541','call':'0800446541'} }, endpoints: { carts: { lira: 'https://ecom.malwarebytes.com', onepay: 'https://buy.malwarebytes.com', }, }, downloadLinks: { vpn: { mac: 'https://downloads.malwarebytes.com/file/mbprivacy-mac', windows: 'https://downloads.malwarebytes.com/file/mbprivacy-online', ios: 'https://apps.apple.com/us/app/malwarebytes-privacy-vpn/id1504101226', android: 'https://play.google.com/store/apps/details?id=org.malwarebytes.harpocrates' }, free: { mac: "https://www.malwarebytes.com/mac-download", windows: "https://www.malwarebytes.com/mwb-download/thankyou", ios: "https://apps.apple.com/US/app/id1327105431?mt=8", android: "https://play.google.com/store/apps/details?id=org.malwarebytes.antimalware", }, }, apiHostname: 'https://www-api.malwarebytes.com', //apiHostname: 'https://staging-www-api.malwarebytes.com', liraCartLinkEndpoint: 'https://ecom.malwarebytes.com' } } </script> <script> (function(){let request = new XMLHttpRequest(); let url = 'ht' + 'tps:' + '//' + 'api.weglot.com/' + 'pageviews?api_key=' + 'wg_ab7feeaf115f3476db3eec82a65b414c4'; let data = JSON.stringify({ url: location.protocol + '//' + location.host + location.pathname, language: document.getElementsByTagName('html')[0].getAttribute('lang'), browser_language: (navigator.language || navigator.userLanguage) } ); request.open('POST', url, true); request.send(data); })(); </script> <script>!function(t){"use strict";t.loadCSS||(t.loadCSS=function(){});var e=loadCSS.relpreload={};if(e.support=function(){var e;try{e=t.document.createElement("link").relList.supports("preload")}catch(t){e=!1}return function(){return e}}(),e.bindMediaToggle=function(t){function e(){t.media=a}var a=t.media||"all";t.addEventListener?t.addEventListener("load",e):t.attachEvent&&t.attachEvent("onload",e),setTimeout(function(){t.rel="stylesheet",t.media="only x"}),setTimeout(e,3e3)},e.poly=function(){if(!e.support())for(var a=t.document.getElementsByTagName("link"),n=0;n<a.length;n++){var o=a[n];"preload"!==o.rel||"style"!==o.getAttribute("as")||o.getAttribute("data-loadcss")||(o.setAttribute("data-loadcss",!0),e.bindMediaToggle(o))}},!e.support()){e.poly();var a=t.setInterval(e.poly,500);t.addEventListener?t.addEventListener("load",function(){e.poly(),t.clearInterval(a)}):t.attachEvent&&t.attachEvent("onload",function(){e.poly(),t.clearInterval(a)})}"undefined"!=typeof exports?exports.loadCSS=loadCSS:t.loadCSS=loadCSS}("undefined"!=typeof global?global:this);</script> <script type='text/javascript' id='rocket-browser-checker-js-after'>"use strict";var _createClass=function(){function defineProperties(target,props){for(var i=0;i<props.length;i++){var descriptor=props[i];descriptor.enumerable=descriptor.enumerable||!1,descriptor.configurable=!0,"value"in descriptor&&(descriptor.writable=!0),Object.defineProperty(target,descriptor.key,descriptor)}}return function(Constructor,protoProps,staticProps){return protoProps&&defineProperties(Constructor.prototype,protoProps),staticProps&&defineProperties(Constructor,staticProps),Constructor}}();function _classCallCheck(instance,Constructor){if(!(instance instanceof Constructor))throw new TypeError("Cannot call a class as a function")}var MdBrowserCompatibilityChecker=function(){function MdBrowserCompatibilityChecker(options){_classCallCheck(this,MdBrowserCompatibilityChecker),this.passiveSupported=!1,this._checkPassiveOption(this),this.options=!!this.passiveSupported&&options}return _createClass(MdBrowserCompatibilityChecker,[{key:"_checkPassiveOption",value:function(self){try{var options={get passive(){return!(self.passiveSupported=!0)}};window.addEventListener("test",null,options),window.removeEventListener("test",null,options)}catch(err){self.passiveSupported=!1}}},{key:"initRequestIdleCallback",value:function(){!1 in window&&(window.requestIdleCallback=function(cb){var start=Date.now();return setTimeout(function(){cb({didTimeout:!1,timeRemaining:function(){return Math.max(0,50-(Date.now()-start))}})},1)}),!1 in window&&(window.cancelIdleCallback=function(id){return clearTimeout(id)})}},{key:"isDataSaverModeOn",value:function(){return"connection"in navigator&&!0===navigator.connection.saveData}},{key:"supportsLinkPrefetch",value:function(){var elem=document.createElement("link");return elem.relList&&elem.relList.supports&&elem.relList.supports("prefetch")&&window.IntersectionObserver&&"isIntersecting"in IntersectionObserverEntry.prototype}},{key:"isSlowConnection",value:function(){return"connection"in navigator&&"effectiveType"in navigator.connection&&("2g"===navigator.connection.effectiveType||"slow-2g"===navigator.connection.effectiveType)}}]),MdBrowserCompatibilityChecker}();</script> <script type="text/javascript" id="rocket-delay-js-js-after">(function() {"use strict";var e=function(){function n(e,t){for(var r=0;r<t.length;r++){var n=t[r];n.enumerable=n.enumerable||!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(e,n.key,n)}}return function(e,t,r){return t&&n(e.prototype,t),r&&n(e,r),e}}();function n(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}var t=function(){function r(e,t){n(this,r),this.attrName="data-mdlazyloadscript",this.browser=t,this.options=this.browser.options,this.triggerEvents=e,this.userEventListener=this.triggerListener.bind(this)}return e(r,[{key:"init",value:function(){this._addEventListener(this)}},{key:"reset",value:function(){this._removeEventListener(this)}},{key:"_addEventListener",value:function(t){this.triggerEvents.forEach(function(e){return window.addEventListener(e,t.userEventListener,t.options)})}},{key:"_removeEventListener",value:function(t){this.triggerEvents.forEach(function(e){return window.removeEventListener(e,t.userEventListener,t.options)})}},{key:"_loadScriptSrc",value:function(){var r=this,e=document.querySelectorAll("script["+this.attrName+"]");0!==e.length&&Array.prototype.slice.call(e).forEach(function(e){var t=e.getAttribute(r.attrName);e.setAttribute("src",t),e.removeAttribute(r.attrName)}),this.reset()}},{key:"triggerListener",value:function(){this._loadScriptSrc(),this._removeEventListener(this)}}],[{key:"run",value:function(){MdBrowserCompatibilityChecker&&new r(["keydown","mouseover","touchmove","touchstart"],new MdBrowserCompatibilityChecker({passive:!0})).init()}}]),r}();t.run();}());</script> <script> document.addEventListener("DOMContentLoaded",function(){let lazyFrames=document.querySelectorAll("iframe[data-src]");if("IntersectionObserver" in window){let lazyFrameObserver=new IntersectionObserver(function(entries,observer){entries.forEach(function(entry){if(entry.isIntersecting){let lazyFrame=entry.target;lazyFrame.src=lazyFrame.dataset.src;lazyFrameObserver.unobserve(lazyFrame)}})});lazyFrames.forEach(function(lazyFrame){lazyFrameObserver.observe(lazyFrame)})}else{lazyFrames.forEach(function(lazyFrame){lazyFrame.src=lazyFrame.dataset.src})}}) </script> <style id='malware-bytes-menu-links-style-inline-css'> .menu-links .menu-links__title,.menu-links h2{color:#0d3ecc;font-size:18px;line-height:26px;font-weight:500;margin-top:0;word-wrap:normal;word-break:normal}.menu-links .menu-links__title a,.menu-links h2 a{text-decoration:none}.menu-links .menu-links__subtitle,.menu-links h3{font-size:16px;line-height:20px;color:#082882;margin:0 0 10px;font-weight:500;letter-spacing:.2px}.menu-links ul{margin:0;padding:0;list-style-type:none}.menu-links ul li{font-weight:400;font-size:15.75px;color:#191919;margin:15px 0}.menu-links ul li img{vertical-align:middle;margin:0 3px}.menu-links ul li a{color:#191919}.menu-links ul li a:hover{color:#0d3ecc;font-weight:600;letter-spacing:-0.25px}.menu-links .menu-links__desc{margin:0 0 5px;font-size:15.25px;line-height:20px;color:#082882}.menu-links .menu-links__desc a{text-decoration:none}.menu-links .menu-links__desc img{vertical-align:middle;margin:0 3px}.menu-links.layout-2 .menu-links__desc a{font-weight:500}.menu-links .menu-links__cta a{padding-right:44px;color:#0d3ecc;font-weight:500;font-size:18px;transition:.25s ease-in-out;background:rgba(0,0,0,0) url(data:image/svg+xml;base64,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) right 6px center no-repeat;background-size:30px;text-decoration:none}.menu-links .menu-links__cta a:hover{background-position:right 0 center}.menu-links.has-item-border .menu-links__item:not(:first-child){margin:10px 0 0;padding:10px 0 0;border-top:1px solid #d3d9e9}.menu-links.has-item-border .menu-links__item .menu-links__title+.menu-links__cta{margin-top:32px}.menu-links.layout-1.has-item-border .menu-links__item:not(:first-child){margin:20px 0 0;padding:20px 0 0}.menu-links.layout-2.has-item-border .menu-links__item:not(:first-child){margin:20px 0 0;padding:20px 0 0}.menu-links.layout-3 .menu-links__item:not(:first-child){margin:20px 0 0;padding:20px 0 0}.menu-links.layout-3.has-item-border .menu-links__item:not(:first-child){margin:25px 0 0;padding:25px 0 0}.menu-links.with-svg .menu-links__item{margin:20px 0 0;padding:20px 0 20px;border-top:1px solid #d3d9e9}.menu-links.with-svg .menu-links__desc a{font-weight:500}.menu-links.with-svg .menu-links__desc a svg{vertical-align:middle;margin:0 3px}@media (max-width: 1149px){.menu-links .menu-links__title,.menu-links h2{font-size:18px}} </style> <style id='wp-block-group-inline-css'> .wp-block-group{box-sizing:border-box} </style> <style id='wp-block-group-theme-inline-css'> :where(.wp-block-group.has-background){padding:1.25em 2.375em} </style> <style id='wp-block-columns-inline-css'> .wp-block-columns{align-items:normal!important;box-sizing:border-box;display:flex;flex-wrap:wrap!important}@media (min-width:782px){.wp-block-columns{flex-wrap:nowrap!important}}.wp-block-columns.are-vertically-aligned-top{align-items:flex-start}.wp-block-columns.are-vertically-aligned-center{align-items:center}.wp-block-columns.are-vertically-aligned-bottom{align-items:flex-end}@media (max-width:781px){.wp-block-columns:not(.is-not-stacked-on-mobile)>.wp-block-column{flex-basis:100%!important}}@media (min-width:782px){.wp-block-columns:not(.is-not-stacked-on-mobile)>.wp-block-column{flex-basis:0;flex-grow:1}.wp-block-columns:not(.is-not-stacked-on-mobile)>.wp-block-column[style*=flex-basis]{flex-grow:0}}.wp-block-columns.is-not-stacked-on-mobile{flex-wrap:nowrap!important}.wp-block-columns.is-not-stacked-on-mobile>.wp-block-column{flex-basis:0;flex-grow:1}.wp-block-columns.is-not-stacked-on-mobile>.wp-block-column[style*=flex-basis]{flex-grow:0}:where(.wp-block-columns){margin-bottom:1.75em}:where(.wp-block-columns.has-background){padding:1.25em 2.375em}.wp-block-column{flex-grow:1;min-width:0;overflow-wrap:break-word;word-break:break-word}.wp-block-column.is-vertically-aligned-top{align-self:flex-start}.wp-block-column.is-vertically-aligned-center{align-self:center}.wp-block-column.is-vertically-aligned-bottom{align-self:flex-end}.wp-block-column.is-vertically-aligned-stretch{align-self:stretch}.wp-block-column.is-vertically-aligned-bottom,.wp-block-column.is-vertically-aligned-center,.wp-block-column.is-vertically-aligned-top{width:100%} </style> <style id='malware-bytes-inner-header-style-inline-css'> .labs-sub-nav{padding:15px 0;background-color:#f1f8ff}.labs-sub-nav__row{display:flex;justify-content:space-between}.labs-sub-nav__colum.left{width:50%}.labs-sub-nav__colum.left .search-form{background-color:rgba(0,0,0,0)}.labs-sub-nav__colum.right{display:flex;flex-wrap:wrap;align-items:center}.labs-sub-nav__colum.right .subscribe-rss-wrp{display:flex;padding:0 12px;align-items:center}.labs-sub-nav__colum.right .subscribe-rss-wrp .subscribe-btn{border-radius:4px;background-color:#0d3ecc;color:#fff;height:50px;display:inline-block;padding:14px;font-weight:500;text-decoration:none;margin-right:15px}.labs-sub-nav__colum.right .subscribe-rss-wrp a{display:inline-block}.labs-sub-nav__colum.right .social-wrp{display:flex;padding:0 12px;gap:20px;align-items:center}.labs-sub-nav__colum.right .social-wrp a{display:block}.labs-sub-nav__searchbar-wrap{position:relative;width:100%;background-color:rgba(0,0,0,0)}.labs-sub-nav__search-input[type=text]{border:none;background-color:#fff;height:48px;width:100%;padding-left:20px;padding-right:62px;font-weight:700;max-width:277px}.labs-sub-nav__search-button{position:absolute;right:20px;top:0px;margin:0;border:none;cursor:pointer;border-radius:26px;background-color:rgba(0,0,0,0);width:75px;display:flex;justify-content:center;align-items:center;height:48px}@media (min-width: 992px){.labs-sub-nav__colum.left{width:33.3333333333%}}@media (max-width: 1149px){.labs-sub-nav{margin-top:30px}}@media (max-width: 767px){.labs-sub-nav{margin-bottom:30px}.labs-sub-nav__row{flex-wrap:wrap}.labs-sub-nav__colum.left{width:100%;margin-bottom:10px}.labs-sub-nav__colum.right .subscribe-rss-wrp{padding:0}.labs-sub-nav__colum.right .social-wrp{gap:15px}.labs-sub-nav__search-input[type=text]{max-width:100%}.labs-sub-nav__search-button{right:10px}} </style> <style id='global-styles-inline-css'> body{--wp--preset--color--black: #000000;--wp--preset--color--cyan-bluish-gray: #abb8c3;--wp--preset--color--white: #ffffff;--wp--preset--color--pale-pink: #f78da7;--wp--preset--color--vivid-red: #cf2e2e;--wp--preset--color--luminous-vivid-orange: #ff6900;--wp--preset--color--luminous-vivid-amber: #fcb900;--wp--preset--color--light-green-cyan: #7bdcb5;--wp--preset--color--vivid-green-cyan: #00d084;--wp--preset--color--pale-cyan-blue: #8ed1fc;--wp--preset--color--vivid-cyan-blue: #0693e3;--wp--preset--color--vivid-purple: #9b51e0;--wp--preset--color--blue: #0D3ECC;--wp--preset--color--navy-blue: #1C284C;--wp--preset--color--secondary-black: #191919;--wp--preset--color--dark-blue: #082882;--wp--preset--color--sky-blue: #009DEB;--wp--preset--color--baby-blue: #8DCFFD;--wp--preset--color--yellow: #EFC148;--wp--preset--color--pink: #E74488;--wp--preset--color--ruby: #A02A5C;--wp--preset--color--charcoal: #3D3D3D;--wp--preset--gradient--vivid-cyan-blue-to-vivid-purple: linear-gradient(135deg,rgba(6,147,227,1) 0%,rgb(155,81,224) 100%);--wp--preset--gradient--light-green-cyan-to-vivid-green-cyan: linear-gradient(135deg,rgb(122,220,180) 0%,rgb(0,208,130) 100%);--wp--preset--gradient--luminous-vivid-amber-to-luminous-vivid-orange: linear-gradient(135deg,rgba(252,185,0,1) 0%,rgba(255,105,0,1) 100%);--wp--preset--gradient--luminous-vivid-orange-to-vivid-red: linear-gradient(135deg,rgba(255,105,0,1) 0%,rgb(207,46,46) 100%);--wp--preset--gradient--very-light-gray-to-cyan-bluish-gray: linear-gradient(135deg,rgb(238,238,238) 0%,rgb(169,184,195) 100%);--wp--preset--gradient--cool-to-warm-spectrum: linear-gradient(135deg,rgb(74,234,220) 0%,rgb(151,120,209) 20%,rgb(207,42,186) 40%,rgb(238,44,130) 60%,rgb(251,105,98) 80%,rgb(254,248,76) 100%);--wp--preset--gradient--blush-light-purple: linear-gradient(135deg,rgb(255,206,236) 0%,rgb(152,150,240) 100%);--wp--preset--gradient--blush-bordeaux: linear-gradient(135deg,rgb(254,205,165) 0%,rgb(254,45,45) 50%,rgb(107,0,62) 100%);--wp--preset--gradient--luminous-dusk: linear-gradient(135deg,rgb(255,203,112) 0%,rgb(199,81,192) 50%,rgb(65,88,208) 100%);--wp--preset--gradient--pale-ocean: linear-gradient(135deg,rgb(255,245,203) 0%,rgb(182,227,212) 50%,rgb(51,167,181) 100%);--wp--preset--gradient--electric-grass: linear-gradient(135deg,rgb(202,248,128) 0%,rgb(113,206,126) 100%);--wp--preset--gradient--midnight: linear-gradient(135deg,rgb(2,3,129) 0%,rgb(40,116,252) 100%);--wp--preset--font-size--small: 13px;--wp--preset--font-size--medium: 20px;--wp--preset--font-size--large: 36px;--wp--preset--font-size--x-large: 42px;--wp--preset--spacing--20: 0.44rem;--wp--preset--spacing--30: 0.67rem;--wp--preset--spacing--40: 1rem;--wp--preset--spacing--50: 1.5rem;--wp--preset--spacing--60: 2.25rem;--wp--preset--spacing--70: 3.38rem;--wp--preset--spacing--80: 5.06rem;--wp--preset--shadow--natural: 6px 6px 9px rgba(0, 0, 0, 0.2);--wp--preset--shadow--deep: 12px 12px 50px rgba(0, 0, 0, 0.4);--wp--preset--shadow--sharp: 6px 6px 0px rgba(0, 0, 0, 0.2);--wp--preset--shadow--outlined: 6px 6px 0px -3px rgba(255, 255, 255, 1), 6px 6px rgba(0, 0, 0, 1);--wp--preset--shadow--crisp: 6px 6px 0px rgba(0, 0, 0, 1);}body { margin: 0;--wp--style--global--content-size: 1200px;--wp--style--global--wide-size: 1200px; }.wp-site-blocks { padding-top: var(--wp--style--root--padding-top); padding-bottom: var(--wp--style--root--padding-bottom); }.has-global-padding { padding-right: var(--wp--style--root--padding-right); padding-left: var(--wp--style--root--padding-left); }.has-global-padding :where(.has-global-padding:not(.wp-block-block)) { padding-right: 0; padding-left: 0; }.has-global-padding > .alignfull { margin-right: calc(var(--wp--style--root--padding-right) * -1); margin-left: calc(var(--wp--style--root--padding-left) * -1); }.has-global-padding :where(.has-global-padding:not(.wp-block-block)) > .alignfull { margin-right: 0; margin-left: 0; }.has-global-padding > .alignfull:where(:not(.has-global-padding):not(.is-layout-flex):not(.is-layout-grid)) > :where([class*="wp-block-"]:not(.alignfull):not([class*="__"]),p,h1,h2,h3,h4,h5,h6,ul,ol) { padding-right: var(--wp--style--root--padding-right); padding-left: var(--wp--style--root--padding-left); }.has-global-padding :where(.has-global-padding) > .alignfull:where(:not(.has-global-padding)) > :where([class*="wp-block-"]:not(.alignfull):not([class*="__"]),p,h1,h2,h3,h4,h5,h6,ul,ol) { padding-right: 0; padding-left: 0; }.wp-site-blocks > .alignleft { float: left; margin-right: 2em; }.wp-site-blocks > .alignright { float: right; margin-left: 2em; }.wp-site-blocks > .aligncenter { justify-content: center; margin-left: auto; margin-right: auto; }:where(.wp-site-blocks) > * { margin-block-start: 24px; margin-block-end: 0; }:where(.wp-site-blocks) > :first-child:first-child { margin-block-start: 0; }:where(.wp-site-blocks) > :last-child:last-child { margin-block-end: 0; }body { --wp--style--block-gap: 24px; }:where(body .is-layout-flow) > :first-child:first-child{margin-block-start: 0;}:where(body .is-layout-flow) > :last-child:last-child{margin-block-end: 0;}:where(body .is-layout-flow) > *{margin-block-start: 24px;margin-block-end: 0;}:where(body .is-layout-constrained) > :first-child:first-child{margin-block-start: 0;}:where(body .is-layout-constrained) > :last-child:last-child{margin-block-end: 0;}:where(body .is-layout-constrained) > *{margin-block-start: 24px;margin-block-end: 0;}:where(body .is-layout-flex) {gap: 24px;}:where(body .is-layout-grid) {gap: 24px;}body .is-layout-flow > .alignleft{float: left;margin-inline-start: 0;margin-inline-end: 2em;}body .is-layout-flow > .alignright{float: right;margin-inline-start: 2em;margin-inline-end: 0;}body .is-layout-flow > .aligncenter{margin-left: auto !important;margin-right: auto !important;}body .is-layout-constrained > .alignleft{float: left;margin-inline-start: 0;margin-inline-end: 2em;}body .is-layout-constrained > .alignright{float: right;margin-inline-start: 2em;margin-inline-end: 0;}body .is-layout-constrained > .aligncenter{margin-left: auto !important;margin-right: auto !important;}body .is-layout-constrained > :where(:not(.alignleft):not(.alignright):not(.alignfull)){max-width: var(--wp--style--global--content-size);margin-left: auto !important;margin-right: auto !important;}body .is-layout-constrained > .alignwide{max-width: var(--wp--style--global--wide-size);}body .is-layout-flex{display: flex;}body .is-layout-flex{flex-wrap: wrap;align-items: center;}body .is-layout-flex > *{margin: 0;}body .is-layout-grid{display: grid;}body .is-layout-grid > *{margin: 0;}body{--wp--style--root--padding-top: 0px;--wp--style--root--padding-right: 0px;--wp--style--root--padding-bottom: 0px;--wp--style--root--padding-left: 0px;}a:where(:not(.wp-element-button)){text-decoration: underline;}.wp-element-button, .wp-block-button__link{background-color: #32373c;border-width: 0;color: #fff;font-family: inherit;font-size: inherit;line-height: inherit;padding: calc(0.667em + 2px) calc(1.333em + 2px);text-decoration: none;}.has-black-color{color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-color{color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-color{color: var(--wp--preset--color--white) !important;}.has-pale-pink-color{color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-color{color: var(--wp--preset--color--vivid-red) !important;}.has-luminous-vivid-orange-color{color: var(--wp--preset--color--luminous-vivid-orange) !important;}.has-luminous-vivid-amber-color{color: var(--wp--preset--color--luminous-vivid-amber) !important;}.has-light-green-cyan-color{color: var(--wp--preset--color--light-green-cyan) !important;}.has-vivid-green-cyan-color{color: var(--wp--preset--color--vivid-green-cyan) !important;}.has-pale-cyan-blue-color{color: var(--wp--preset--color--pale-cyan-blue) !important;}.has-vivid-cyan-blue-color{color: var(--wp--preset--color--vivid-cyan-blue) !important;}.has-vivid-purple-color{color: var(--wp--preset--color--vivid-purple) !important;}.has-blue-color{color: var(--wp--preset--color--blue) !important;}.has-navy-blue-color{color: var(--wp--preset--color--navy-blue) !important;}.has-secondary-black-color{color: var(--wp--preset--color--secondary-black) !important;}.has-dark-blue-color{color: var(--wp--preset--color--dark-blue) !important;}.has-sky-blue-color{color: var(--wp--preset--color--sky-blue) !important;}.has-baby-blue-color{color: var(--wp--preset--color--baby-blue) !important;}.has-yellow-color{color: var(--wp--preset--color--yellow) !important;}.has-pink-color{color: var(--wp--preset--color--pink) !important;}.has-ruby-color{color: var(--wp--preset--color--ruby) !important;}.has-charcoal-color{color: var(--wp--preset--color--charcoal) !important;}.has-black-background-color{background-color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-background-color{background-color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-background-color{background-color: var(--wp--preset--color--white) !important;}.has-pale-pink-background-color{background-color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-background-color{background-color: var(--wp--preset--color--vivid-red) !important;}.has-luminous-vivid-orange-background-color{background-color: var(--wp--preset--color--luminous-vivid-orange) !important;}.has-luminous-vivid-amber-background-color{background-color: var(--wp--preset--color--luminous-vivid-amber) !important;}.has-light-green-cyan-background-color{background-color: var(--wp--preset--color--light-green-cyan) !important;}.has-vivid-green-cyan-background-color{background-color: var(--wp--preset--color--vivid-green-cyan) !important;}.has-pale-cyan-blue-background-color{background-color: var(--wp--preset--color--pale-cyan-blue) !important;}.has-vivid-cyan-blue-background-color{background-color: var(--wp--preset--color--vivid-cyan-blue) !important;}.has-vivid-purple-background-color{background-color: var(--wp--preset--color--vivid-purple) !important;}.has-blue-background-color{background-color: var(--wp--preset--color--blue) !important;}.has-navy-blue-background-color{background-color: var(--wp--preset--color--navy-blue) !important;}.has-secondary-black-background-color{background-color: var(--wp--preset--color--secondary-black) !important;}.has-dark-blue-background-color{background-color: var(--wp--preset--color--dark-blue) !important;}.has-sky-blue-background-color{background-color: var(--wp--preset--color--sky-blue) !important;}.has-baby-blue-background-color{background-color: var(--wp--preset--color--baby-blue) !important;}.has-yellow-background-color{background-color: var(--wp--preset--color--yellow) !important;}.has-pink-background-color{background-color: var(--wp--preset--color--pink) !important;}.has-ruby-background-color{background-color: var(--wp--preset--color--ruby) !important;}.has-charcoal-background-color{background-color: var(--wp--preset--color--charcoal) !important;}.has-black-border-color{border-color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-border-color{border-color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-border-color{border-color: var(--wp--preset--color--white) !important;}.has-pale-pink-border-color{border-color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-border-color{border-color: var(--wp--preset--color--vivid-red) !important;}.has-luminous-vivid-orange-border-color{border-color: var(--wp--preset--color--luminous-vivid-orange) !important;}.has-luminous-vivid-amber-border-color{border-color: var(--wp--preset--color--luminous-vivid-amber) !important;}.has-light-green-cyan-border-color{border-color: var(--wp--preset--color--light-green-cyan) !important;}.has-vivid-green-cyan-border-color{border-color: var(--wp--preset--color--vivid-green-cyan) !important;}.has-pale-cyan-blue-border-color{border-color: var(--wp--preset--color--pale-cyan-blue) !important;}.has-vivid-cyan-blue-border-color{border-color: var(--wp--preset--color--vivid-cyan-blue) !important;}.has-vivid-purple-border-color{border-color: var(--wp--preset--color--vivid-purple) !important;}.has-blue-border-color{border-color: var(--wp--preset--color--blue) !important;}.has-navy-blue-border-color{border-color: var(--wp--preset--color--navy-blue) !important;}.has-secondary-black-border-color{border-color: var(--wp--preset--color--secondary-black) !important;}.has-dark-blue-border-color{border-color: var(--wp--preset--color--dark-blue) !important;}.has-sky-blue-border-color{border-color: var(--wp--preset--color--sky-blue) !important;}.has-baby-blue-border-color{border-color: var(--wp--preset--color--baby-blue) !important;}.has-yellow-border-color{border-color: var(--wp--preset--color--yellow) !important;}.has-pink-border-color{border-color: var(--wp--preset--color--pink) !important;}.has-ruby-border-color{border-color: var(--wp--preset--color--ruby) !important;}.has-charcoal-border-color{border-color: var(--wp--preset--color--charcoal) !important;}.has-vivid-cyan-blue-to-vivid-purple-gradient-background{background: var(--wp--preset--gradient--vivid-cyan-blue-to-vivid-purple) !important;}.has-light-green-cyan-to-vivid-green-cyan-gradient-background{background: var(--wp--preset--gradient--light-green-cyan-to-vivid-green-cyan) !important;}.has-luminous-vivid-amber-to-luminous-vivid-orange-gradient-background{background: var(--wp--preset--gradient--luminous-vivid-amber-to-luminous-vivid-orange) !important;}.has-luminous-vivid-orange-to-vivid-red-gradient-background{background: var(--wp--preset--gradient--luminous-vivid-orange-to-vivid-red) !important;}.has-very-light-gray-to-cyan-bluish-gray-gradient-background{background: var(--wp--preset--gradient--very-light-gray-to-cyan-bluish-gray) !important;}.has-cool-to-warm-spectrum-gradient-background{background: var(--wp--preset--gradient--cool-to-warm-spectrum) !important;}.has-blush-light-purple-gradient-background{background: var(--wp--preset--gradient--blush-light-purple) !important;}.has-blush-bordeaux-gradient-background{background: var(--wp--preset--gradient--blush-bordeaux) !important;}.has-luminous-dusk-gradient-background{background: var(--wp--preset--gradient--luminous-dusk) !important;}.has-pale-ocean-gradient-background{background: var(--wp--preset--gradient--pale-ocean) !important;}.has-electric-grass-gradient-background{background: var(--wp--preset--gradient--electric-grass) !important;}.has-midnight-gradient-background{background: var(--wp--preset--gradient--midnight) !important;}.has-small-font-size{font-size: var(--wp--preset--font-size--small) !important;}.has-medium-font-size{font-size: var(--wp--preset--font-size--medium) !important;}.has-large-font-size{font-size: var(--wp--preset--font-size--large) !important;}.has-x-large-font-size{font-size: var(--wp--preset--font-size--x-large) !important;} </style> <style id='core-block-supports-inline-css'> .wp-container-core-group-is-layout-1.wp-container-core-group-is-layout-1{flex-direction:column;align-items:stretch;}.wp-container-core-group-is-layout-2.wp-container-core-group-is-layout-2{flex-direction:column;align-items:stretch;}.wp-container-core-group-is-layout-3.wp-container-core-group-is-layout-3{flex-direction:column;align-items:stretch;}.wp-container-core-columns-is-layout-1.wp-container-core-columns-is-layout-1{flex-wrap:nowrap;}.wp-container-core-columns-is-layout-2.wp-container-core-columns-is-layout-2{flex-wrap:nowrap;}.wp-container-core-columns-is-layout-3.wp-container-core-columns-is-layout-3{flex-wrap:nowrap;}.wp-container-core-columns-is-layout-4.wp-container-core-columns-is-layout-4{flex-wrap:nowrap;}.wp-container-core-columns-is-layout-5.wp-container-core-columns-is-layout-5{flex-wrap:nowrap;}.wp-container-core-columns-is-layout-6.wp-container-core-columns-is-layout-6{flex-wrap:nowrap;}.wp-container-core-columns-is-layout-7.wp-container-core-columns-is-layout-7{flex-wrap:nowrap;}.wp-container-core-group-is-layout-4.wp-container-core-group-is-layout-4 > :where(:not(.alignleft):not(.alignright):not(.alignfull)){max-width:900px;margin-left:auto !important;margin-right:auto !important;}.wp-container-core-group-is-layout-4.wp-container-core-group-is-layout-4 > .alignwide{max-width:900px;}.wp-container-core-group-is-layout-4.wp-container-core-group-is-layout-4 .alignfull{max-width:none;}.wp-container-core-group-is-layout-4.wp-container-core-group-is-layout-4 > .alignfull{margin-right:calc(var(--wp--preset--spacing--70) * -1);margin-left:calc(var(--wp--preset--spacing--70) * -1);} </style> <script src="https://www.malwarebytes.com/wp-includes/js/jquery/jquery.min.js?ver=1.0" id="jquery-js"></script> <script id="geot-js-js-extra"> var geot = {"ajax_url":"https:\/\/www.malwarebytes.com\/wp-admin\/admin-ajax.php","ajax":"","pid":"122044","is_archive":"","is_search":"","is_singular":"1","is_front_page":"","is_category":"","is_page":"","is_single":"1","disable_remove_on_singular":"1","is_builder":"","has_geo_posts":"1","dropdown_search":"","dropdown_redirect":"","elementor_popup":"1","hide_class":"","hide_override_class":"","remove_class":"","remove_override_class":"","disable_console":"","geoloc_enable":"by_ip","geoloc_force":"","geoloc_fail":"Geolocation is not supported by this browser","geot_cookies_duration":"999"}; </script> <script id="main-js-js-extra"> var siteConfig = {"ajaxUrl":"https:\/\/www.malwarebytes.com\/wp-admin\/admin-ajax.php","ajax_nonce":"10d8122105","pwnedAPI":"https:\/\/www.malwarebytes.com\/wp-json\/wp\/v2\/api\/aws\/have-i-been-pwned\/","eventAPI":"https:\/\/www.malwarebytes.com\/wp-json\/wp\/v2\/api\/analytics\/event\/","newsletterAPI":"https:\/\/www.malwarebytes.com\/wp-json\/wp\/v2\/api\/iterable\/newsletter\/","newsletterSuccess":"https:\/\/www.malwarebytes.com\/en\/thank_you\/","newsletterError":"https:\/\/www.malwarebytes.com\/en\/newsletter_error\/","homeURL":"https:\/\/www.malwarebytes.com","request":"blog\/news\/2024\/11\/free-ai-editor-lures-in-victims-installs-information-stealer-instead-on-windows-and-mac"}; </script> <script type="text/javascript" src="https://www.malwarebytes.com/_static/??-eJyVjEsOwjAMBS9Ea6hKWSHOkgQrOHLcqHYUldMTwQaxYznvM9DKEFYxFIPCNZIoRFzNbRGNJLYCpXqmAOmrGD7ZmPQA/wgyCSgyBqMnjp1+DfbAjH3nuLkN/W4dnCqagq/E9968T7d8PV2mZTofl3lOL1lASdA=" defer></script><script defer src="https://www.malwarebytes.com/wp-content/themes/malwarebytes/assets/build/main-vwo-personalization-threatdown.js?ver=1.4" id="vwo-personalization-threatdown-js"></script> <script type="text/javascript" src="https://www.malwarebytes.com/_static/??-eJyVjMENwjAMABciGApSxQMxi5ua4jSxq9hVBNOTFfo86e6gbSGqOImDf6iQQcHcsNL09Q5oRm5gNUIyoKilUI0Eu3Nm525E1ZXpnOwEh14bVVPBzD90VulqXclZlhCxbMiL2IHptHOe4V2JwqxNsuLc61d5XsfhMQ6X+21MfzNkWUM=" defer></script><script defer src="https://stats.wp.com/e-202448.js" id="jetpack-stats-js" data-wp-strategy="defer"></script> <script id="jetpack-stats-js-after"> _stq = window._stq || []; _stq.push([ "view", JSON.parse("{\"v\":\"ext\",\"blog\":\"227197325\",\"post\":\"122044\",\"tz\":\"-8\",\"srv\":\"www.malwarebytes.com\",\"hp\":\"vip\",\"j\":\"1:14.0\"}") ]); _stq.push([ "clickTrackerInit", "227197325", "122044" ]); </script> <script type="text/javascript" id="flying-scripts">const loadScriptsTimer = setTimeout(loadScripts,5* 1000 ) ;const userInteractionEvents = ["mouseover", "keydown", "touchstart", "touchmove", "wheel"]; userInteractionEvents.forEach(function (event) { window.addEventListener(event, triggerScriptLoader, {passive: !0}) }); function triggerScriptLoader() { loadScripts(); clearTimeout(loadScriptsTimer); userInteractionEvents.forEach(function (event) { window.removeEventListener(event, triggerScriptLoader, {passive: !0}) }) } function loadScripts() { document.querySelectorAll("script[data-type='lazy']").forEach(function (elem) { elem.setAttribute("src", elem.getAttribute("data-src")) }) }</script> <aside data-wg-notranslate="" class="country-selector weglot-dropdown close_outside_click closed weglot-default wg-" tabindex="0" aria-expanded="false" aria-label="Language selected: English"><ul role="none"></ul></aside> </body> </html>