Back Feeds2.Feedburner

AI chatbot recommendations lure users to cryptojacking malware sites

Feeds2.Feedburner •Sinisa Markovic • May 27, 2026

Cybercriminals are using AI chatbot interactions alongside poisoned results to direct users to malicious download sites in an active cryptojacking campaign, Microsoft has warned. The campaign impersonates legitimate software tools such as CrystalDiskInfo, HWMonitor, Display Driver Uninstaller (DDU), FurMark, K-Lite Codec Pack, and PDFgear. Screenshot of engine results showing a malicious source of hwmonitor (Source: Microsoft) “The selection of these brands is deliberate. Each application is favored by PC enthusiasts and hardware-focused users, … More →

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Cryptojacking Malware Exploits AI Chatbots and SEO Poisoning A new cryptojacking campaign is targeting high-performance PC users through malicious downloads disguised as trusted utilities. Attackers leverage SEO poisoning and AI chatbot manipulation to direct users to fake download sites for software like CrystalDiskInfo and HWMonitor. Once downloaded, the malware establishes persistent access using the legitimate remote management tool ScreenConnect, allowing for potential data theft and further exploitation. Microsoft has confirmed the campaign's existence and noted that it focuses on systems with high GPU capabilities to maximize mining output. The malware employs DLL sideloading and process hollowing techniques to evade detection. This campaign highlights the vulnerabilities in AI chatbot recommendations and the ease with which they can be manipulated. Users are advised to avoid relying on AI for software downloads and to verify sources manually. Microsoft Defender has implemented measures to detect and block associated threats. 19 sources 69

Extracted Entities

AI chatbot recommendations lure users to cryptojacking malware sites

The full story

Extracted Entities

Attack Types (1)

MITRE ATT&CK (2)

Tools (6)