TLDR Tech / InfoSec
LLMShare: How Attackers Are Turning AI Chatbot Pages Into Malware Delivery Platforms
Push Security detected a new malvertising campaign that builds on previous campaigns, which used shared ChatGPT conversations to mimic Apple Support information and trick users into downloading malware. The new campaigns that Push detected utilize ChatGPT's rendering feature to present a page that claims to show a service disruption and prompts users to click a button to download the desktop application. The malicious page then redirects the user to a phishing page that mimics the desktop application download page, leading the user to install an infostealer.
Read the full story