AI chatbot recommendations lure users to cryptojacking malware sites

Microsoft warned that cybercriminals are using AI chatbot interactions and poisoned search results to direct users to malicious download sites in an active cryptojacking campaign. The campaign impersonates legitimate software tools favored by PC enthusiasts, including CrystalDiskInfo, HWMonitor, and Display Driver Uninstaller. The attackers aim to infect victims' devices with cryptojacking malware that hijacks system resources to mine cryptocurrency.

Cybercriminals are using AI chatbot interactions alongside poisoned search results to direct users to malicious download sites in an active cryptojacking campaign, Microsoft has warned. The campaign impersonates legitimate software tools such as CrystalDiskInfo, HWMonitor, Display Driver Uninstaller DDU , FurMark, K-Lite Codec Pack, and PDFgear. Screenshot of search engine results showing a malicious source of hwmonitor Source: Microsoft “The selection of these brands is deliberate. Each application is favored by PC enthusiasts and hardware-focused users, … More https://www.helpnetsecurity.com/2026/05/27/ai-chatbot-cryptojacking-campaign/ The post AI chatbot recommendations lure users to cryptojacking malware sites https://www.helpnetsecurity.com/2026/05/27/ai-chatbot-cryptojacking-campaign/ appeared first on Help Net Security https://www.helpnetsecurity.com .