Cybercriminals using Bing Chat to transmit malware

Fraudsters are using Bing Chat, an AI-powered chatbot, to distribute malware-infected software installers that advertise counterfeit websites. The well-known cybersecurity company Malwarebytes has made the frightening discovery of malware-containing software, raising serious worries about the potential danger it poses to consumers who unwittingly download such hazardous stuff onto their computers.

 

Microsoft introduced the AI chatbot in early 2023. The company harnessed the capabilities of the GPT-4 language model to engage users in authentic conversations spanning a wide range of subjects. As per a report, advertisements manifest in the form of links during interactions with Bing Chat. These links are exploited by malicious actors to disseminate malware.

 

As per the report, these compromised advertisements are identical to Advanced IP scanners. When users inquire with Bing Chat about software downloads, a link appears within the chat, alongside sponsored links at the top. Clicking on these sponsored links directs users to a website employing sophisticated methods to differentiate between human users and automated bots or crawlers. If recognized as a genuine human visitor, they are subsequently redirected to a deceptive website with the URL 'advenced-ip-scanner[.]com.' On this deceptive site, users encounter a deceptive prompt urging them to download an installer, which, regrettably, contains malicious software.

 

Users of Bing Chat must be vigilant when engaging with links provided by the chatbot. While Bing Chat is a valuable information source, it is essential to acknowledge and take precautions against the potential dangers posed by counterfeit advertisements.

 

A practical measure for users to consider is utilizing conventional search engines, as they typically present sponsored ads in a more transparent fashion. Additionally, taking the proactive step of installing an ad blocker can effectively safeguard devices against malicious advertisements, thereby reducing the likelihood of inadvertently promoting harmful websites.