Executive Summary
Microsoft warns a cryptojacking campaign uses AI chatbot recommendations to surface malicious download sites.
What Happened
Microsoft has warned of an active cryptojacking campaign that makes use of artificial intelligence (AI) chatbot interactions as a mechanism for surfacing malicious download sites. "This emerging delivery technique extends social engineering beyond conventional search results and increases the visibility of malicious software recommendations," Microsoft Defender Experts and the Microsoft
Vulnerability / Attack Technique
Manipulating AI chatbot recommendations
Technical Mechanism
Chatbots recommend attacker-controlled sites.
AI Security Category
LLM09:2025 Misinformation
Relevant Frameworks
RealGround Analysis
Chatbot answers are a new SEO-poisoning channel. RealGround analysis: verify downloads suggested by AI.
Recommended Controls
- Verify software sources suggested by chatbots
Related RealGround Service
AI Red Teaming · or start with the free AI Agent Security Scanner.
Sources
thehackernews.com: https://thehackernews.com/2026/05/ai-chatbot-recommendations-redirect.html
Summary and analysis written by RealGround from the source above; last updated 2026-10-18.