Cybercriminals camouflaging threats as AI tool installers