Security alert: when AI tools become a bait for cyber scams
- Evelyn Carter
- Jun 18
- 2 min read
AI has become an integral part of our daily lives. However, its widespread adoption has also opened doors for threat actors. Cybercriminals are now exploiting the popularity of well-known AI services to orchestrate sophisticated phishing campaigns, aiming to harvest sensitive personal and financial information.
Why are attackers leveraging the reputation of AI services?
The rapid surge in AI usage means many users are not yet familiar with official communication channels from these platforms. Exploiting this, attackers impersonate reputable brands such as ChatGPT, Claude, and DeepSeek to lure users into clicking malicious links or downloading harmful files. According to Microsoft reports, these are pure social engineering operations that exploit trust rather than breaching the actual AI platforms.
How dangerous are the complex obfuscation techniques used by attackers?
To bypass security filters, attackers often route victims through legitimate services, such as URL shorteners, CRM tools, and GitHub before arriving at the final malicious destination. This makes detection extremely difficult. Consequently, thousands of organizations worldwide have suffered losses, including credit card data, account credentials, and authentication codes, which enable attackers to penetrate corporate systems directly.
What are some typical phishing scenarios observed so far?
ChatGPT impersonation: Attackers sent emails warning users that their ChatGPT Plus subscriptions would be canceled unless they updated their payment methods. Through complex routing and fake pages featuring CAPTCHAs, they successfully harvested credit card details.
Claude impersonation: Users received fake notifications claiming they had violated usage policies, accompanied by a malicious PDF file. Victims were eventually redirected to a fake Microsoft login page designed to steal authentication codes.
DeepSeek and malware campaigns: a fraudulent GitHub organization was created to distribute the Vidar information-stealing malware disguised as DeepSeek-V4 files. Furthermore, malicious AI plugins were distributed via free movie streaming websites to silently install malware on user devices.
How can individuals and organizations mitigate these cyber risks?
Securing your digital environment requires both vigilance and robust technical measures. Users should enable Multi-Factor Authentication (MFA) on all accounts, exercise caution with unsolicited emails, and always verify AI services by navigating directly to their official websites.
For organizations, implementing advanced solutions like network monitoring services and phishing detection systems is crucial to blocking malicious content before it reaches users.
Solutions to build a “digital shield” for enterprises
With deep expertise in digital infrastructure and information security, IPSIP Vietnam provides professional consulting and managed services, helping businesses maintain seamless workflow continuity even when global technology ecosystems experience unexpected technical disruptions.
IPSIP Vietnam's management and monitoring systems have successfully passed the most rigorous audits to achieve top international information security certifications, including ISO 27001:2022 and SOC 2 Type II.
By providing 24/7 non-stop core services - such as the Security Operations Center (SOC), Network Operations Center (NOC), and a dedicated, on-duty IT Support/Helpdesk team - IPSIP commits to directly responding to and intercepting any intrusion attempts, day or night. Partnering with these leading technical minds will help businesses completely eliminate legal and compliance risks, freeing up valuable resources to focus entirely on growth objectives.
Comments