AI chatbot suggestions hijacked to deliver cryptojacking malware to GPU owners
Microsoft Defender experts discovered an active cryptojacking campaign that uses AI chatbot responses and poisoned search results to recommend fake system‑utility downloads. The malicious links impersonate tools like CrystalDiskInfo and HWMonitor, directing victims—especially those with high‑end GPUs—to miner payloads and persistent remote‑access implants. Organizations should enable cloud‑delivered protection and EDR block mode.