Hackers Abuse AI Chatbot Recommendations to Push Malicious Software Download Links

Cybersecuritynews •Tushar Subhra Dutta • May 27, 2026

Hackers are finding new ways to trick people into downloading malware, and this time, they are hiding behind tools many of us have come to trust. A newly uncovered cryptojacking campaign is abusing AI chatbot interactions to steer unsuspecting users toward malicious software download sites. The threat is quiet, convincing, and surprisingly easy for anyone […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Cryptojacking Malware Exploits AI Chatbots and SEO Poisoning A new cryptojacking campaign is targeting high-performance PC users through malicious downloads disguised as trusted utilities. Attackers leverage SEO poisoning and AI chatbot manipulation to direct users to fake download sites for software like CrystalDiskInfo and HWMonitor. Once downloaded, the malware establishes persistent access using the legitimate remote management tool ScreenConnect, allowing for potential data theft and further exploitation. Microsoft has confirmed the campaign's existence and noted that it focuses on systems with high GPU capabilities to maximize mining output. The malware employs DLL sideloading and process hollowing techniques to evade detection. This campaign highlights the vulnerabilities in AI chatbot recommendations and the ease with which they can be manipulated. Users are advised to avoid relying on AI for software downloads and to verify sources manually. Microsoft Defender has implemented measures to detect and block associated threats. 19 sources 69

Hackers Abuse AI Chatbot Recommendations to Push Malicious Software Download Links

The full story

Extracted Entities

Attack Types (1)

Platforms (1)