Microsoft’s AI-powered Bing Chat responses are infiltrated by malicious ads that promote fake download sites which distribute malware.
Malwarebytes researchers have demonstrated how unsuspecting users seeking software downloads can be tricked into visiting malicious websites and unknowingly downloading malware.
Bing Chat, an artificial intelligence (AI) interactive text and image application powered by OpenAI’s GPT-4 was introduced by Microsoft in February 2023 to challenge Google’s dominance in the search industry.
It has impressive engagement numbers and has recorded over one billion chats within just six months of its release.
In March, Microsoft began injecting ads into Bing Chat conversations to generate revenue from this new platform.
The platform’s rising popularity has attracted advertisers seeking to reach a vast user base, but this has also created a channel for potential abuse.
One of the methods used to introduce ads into Bing Chat conversations involves displaying an ad when a user hovers over a link preceding the organic search result. A small “Ad” label next to these links may go unnoticed by the users, potentially leading them to click on deceptive ads disguised as legitimate search results.
When users click on these links, they are directed to fake sites that resembles the official ones, or they are sent to decoy pages. The main aim of these tactics is to lure victims into downloading an installer that appears harmless but actually harbors malicious elements.
The security experts advised users to be cautious while browsing and to employ security tools that provides web protection, ad blocking and malware detection to enhance their online security.
The researchers have reported this security breach to Microsoft, underlining the importance of staying proactive in safeguarding the online search and advertising environment.
Comments