Security researchers discover fake ChatGPT ads that trick you into downloading malware
By Scott Younker, Tom's Guide
Picture: Tom's Guide
Update: Google responds to inquiries about this attack. Sponsored Google ads for fake ChatGPT are leading Windows users to download malware in "ClickFix" traps, according to security researchers from the AI company Island. The sponsored Google ads lead to Custom GPT sites that are built to look like normal ChatGPT websites. These ads pop up when people type terms like "chatgpt" into Google Search. Unfortunately, for trapped users, the ads do go to legitimate chatgpt.com sites. However, in these instances, entering a prompt makes the fake service direct people to a "backup domain" due to "high traffic." Clicking on that link then redirects unsuspecting users to another fake instance of ChatGPT with a fake Cloudflare verification page that contains ClickFix instructions.
This report was first published by Tom's Guide. What you see here is a brief excerpt. The full text is theirs.
Continue reading at Tom's Guide
