Published in News

AI pushes malware with answers

by on29 September 2023

Bing responses injected with ransomware

Malicious advertisements are now being injected into software king of the world Microsoft's AI-powered Bing Chat responses, promoting fake download sites that distribute malware.

Malicious ads spotted by Malwarebytes are pretending to be download sites for the popular 'Advanced IP Scanner' utility, which has been previously used by RomCom RAT and Somnia ransomware operators.

The researchers found that when you asked Bing Chat how to download Advanced IP Scanner, it would display a link to download it in the chat.

However, when you hover over an underlined link in a chat, Bing Chat may show an advertisement first, followed by the legitimate download link. In this case, the sponsored link was a malvertisements pushing malware.

Malwarebytes could not find the final payload for this malware campaign, so it is unclear what malware is ultimately being installed.

In similar campaigns, threat actors commonly distribute information-stealing malware or remote access trojans that allow them to breach other accounts or corporate networks.

Last modified on 29 September 2023
Rate this item
(1 Vote)