This tactic relies on a simple weak point: trust. The malicious file is sent by someone you know, using their stolen account.
Curious about the working of an on-device AI? Here is how an on-device AI works and what you can take from it for yourself.