Bing AI chat messages are being hijacked by ads pushing malware

Bing chat
(Image credit: Microsoft)

Malvertising has made its way to Bing’s chatbot/search engine. Cybersecurity researchers from Malwarebytes recently observed a malicious ad being offered as part of the Chat-GPT, AI-powered answer to a search query. 

Malvertising is a simple practice - hackers try to trick ad networks into displaying ads that look legitimate but are, in fact, malicious. It’s a game of impersonation, as the ads, the sites they’re leading to, and the content being provided there, appear as something they’re not (it’s usually software, streaming services, or cryptocurrency-related tools). 

So far, malvertising was seen on your usual search engines, Google, Bing, etc. despite the companies putting in gargantuan efforts to keep their search results clean, for obvious reasons. However, the emergence of Chat-GPT - especially since its integration into Bing - things have changed. 

New dog, old tricks

Microsoft integrated Chat-GPT into Bing earlier this year, and a few months ago even started monetizing it, practically in the same way other search engines monetized their digital real estate. When a user types in a query, they’d get a result, paired with a few sponsored links (which were clearly stated as sponsored). Bing, in all its AI-powered glory, is no different. 

In this particular instance, when Malwarebytes’ researchers asked Bing for the Advanced IP Scanner tool, they were given a link that ultimately redirected them to “advenced-ip-scanner[.]com” (mind the “e” instead of the “a”), where the victims would download an installer. That installer’s goal was to retrieve the ultimate payload, but it seems to be defunct, as the researchers couldn’t obtain the actual malware. 

“Threat actors continue to leverage search ads to redirect users to malicious sites hosting malware,” the researchers warned. “While Bing Chat is a different search experience, it serves some of the same ads seen via a traditional Bing query.”

Via BleepingComputer 

More from TechRadar Pro

Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.

Read more
A padlock resting on a keyboard.
Understanding and avoiding malvertizing attacks
AI tools.
Not even fairy tales are safe - researchers weaponise bedtime stories to jailbreak AI chatbots and create malware
Pirate skull cyber attack digital technology flag cyber on on computer CPU in background. Darknet and cybercrime banner cyberattack and espionage concept illustration.
Microsoft reveals over a million PCs hit by malvertising campaign
Representational image of a cybercriminal
Criminals are spreading malware disguised as DeepSeek AI
Fraude en ligne phishing
Google Search ads are being hacked to steal account info
Pirate skull cyber attack digital technology flag cyber on on computer CPU in background. Darknet and cybercrime banner cyberattack and espionage concept illustration.
Mac users targeted with new malware, so be on your guard
Latest in Security
Hacker silhouette working on a laptop with North Korean flag on the background
North Korea unveils new military unit targeting AI attacks
An image of network security icons for a network encircling a digital blue earth.
US government warns agencies to make sure their backups are safe from NAKIVO security issue
Laptop computer displaying logo of WordPress, a free and open-source content management system (CMS)
This top WordPress plugin could be hiding a worrying security flaw, so be on your guard
Computer Hacked, System Error, Virus, Cyber attack, Malware Concept. Danger Symbol
Veeam urges users to patch security issues which could allow backup hacks
UK Prime Minister Sir Kier Starmer
The UK releases timeline for migration to post-quantum cryptography
Representational image depecting cybersecurity protection
Cisco smart licensing system sees critical security flaws exploited
Latest in News
L-mount alliance
Sirui joins L-Mount Alliance to deliver its superb budget lenses for Leica, DJI, Sigma and Panasonic cameras
Security padlock and circuit board to protect data
Trust in digital services around the world sees a massive drop as security worries continue
Samuel and Romy standing very close together in A24's Babygirl movie
Everything new on Max in April 2025, including A24's Babygirl and The Last of Us season 2
An AMD Radeon RX 9070 XT made by Sapphire on a table with its retail packaging
AMD’s secret weapon against Nvidia seems to be stock – way more RX 9070 GPUs are rumored to be hitting shelves than RTX 5000 models
Hacker silhouette working on a laptop with North Korean flag on the background
North Korea unveils new military unit targeting AI attacks
Seth Milchick and Kier Eagan's animatronic speaking in Severance season 2 episode 10
Apple TV+ announces Severance has been renewed for season 3 after that devastating finale