Warning: Hackers are spreading malware through Bing AI

November 5, 2023

By Kim Komando

When you want to find a scammer, follow the money. Remember when Microsoft rolled out Bing Chat, backed by OpenAI’s GPT-4, in February 2023? They wanted to shake things up and go smack up against Google. Yeah, I used the words Microsoft Bing for once in my life without laughing.

It was all AI chat-like until Microsoft decided to splash ads into the chat, hoping to make some extra bucks. But guess what? Some sneaky cybercriminals have jumped on the ad-wagon using it as a golden opportunity to spread malware! Yup, scammers are buying ads from Microsoft to steal your data and money.

Here’s the nitty-gritty

Bing AI-based chat feels more like a convo with a buddy than a search engine. It’s friendly. It’s chatty. That’s the catch! This personal touch can make you let your guard down. And when an ad pops up in chat, you might think it’s more reliable than it actually is. 

The problem is that these ads, sometimes disguised as legit download sites, can be downright nasty. Malwarebytes caught a wicked ad pretending to be a download link for a tool called Advanced IP Scanner. 

Instead of getting the legit tool, you’d be directed to a dodgy site that checks if you’re human (yes, they’re that clever), then sends you to a fake, misspelled version of the actual site. The download? You get one, alright. It’s packed with malware scripts to steal your info or give hackers a free pass to your banking, shopping and other online accounts.

🚨 Action steps

It’s not just Bing. You really need to be alert on any AI app or platform you use, anything from ChatGPT to MidJourney.

• Trust, but verify: Just because it’s chat-like doesn’t mean it’s your friend. Always double-check links and download sources.
• Watch for typos: ‘Advenced’ isn’t just a typo. It’s a trap! Always check URLs for crafty misspellings.
• Ads in chat: If you see a promoted result or ads in Bing Chat, take a moment to hover and inspect before clicking.
• Protection First: Ensure your antivirus is always updated. I recommend TotalAV for an extra layer of protection. It’s just $19 for the first year.

This isn’t the last time hackers will get creative. Stick with me and you’ll always stay updated on cybersecurity threats to be a step ahead. Stay sharp and surf safely, techies!