'Threat actors are adapting social engineering and monetization strategies to modern user behavior': Microsoft warns AI chatbots may be sending victims to malicious websites — so be on your guard when clicking

Big letters AI in pink in front of pink and blue strands of light suggesting a digital explosion.

• Microsoft researchers observed cybercriminals adapting SEO poisoning tactics to AI platforms, tricking AI into recommending spoofed utility sites like HWMonitor and CrystalDiskInfo
• Victims who follow these AI‑suggested links download malware via DLL sideloading, which installs ScreenConnect for attacker access and can lead to cryptojacking
• Defenders should treat AI recommendations with the same caution as search results, verifying links before downloading to avoid compromise

With the advent of AI, internet search habits among most users have drastically changed, with the way cybercriminals deliver malware to their victims also changing as a result.