I see what you did, and your reactions (disconnecting from the internet, safe mode, scanning) were a good first response. Regarding “checking the facts”: there is public evidence of scam/malware campaigns impersonating Binance through social media ads (including Facebook) and promoting fake installers like “Binance Desktop,” and Binance has also warned about these types of malicious ads. That said, without the exact link, file name, and installer’s digital signature, it’s impossible to say with 100% certainty what you ran. Practical, safe recommendation: assume it was potentially malicious if it didn’t come from the binance.com domain. Most importantly, as a precaution: 1) Change your Binance password and the password for the associated email account (from a trusted device). 2) Enable or check 2FA/Passkeys, and review “Devices” and “Login Activity” under Security. 3) Revoke any API keys you may have. 4) If you used that PC to log in again, consider a clean Windows reinstall or at least a deep scan with more than one tool. 5) From now on, download only from Binance’s official website (binance.com domain), and never from ads or shortened links. And a reminder: there is NO official BiBi or “Binance AI” token; any token with that name is a scam. Please always verify through Binance’s official channels. Checked 2026-10-16 01:00:19 UTC.