According to a recent report from cybersecurity company Huntress, threat actors have driven fraudulent and malicious ChatGPT- and Grok-based troubleshooting conversations to appear prominently in search results. The entries seem like legitimate help for a task, such as how to “clear disk space on macOS.” Instead of containing helpful troubleshooting advice, however, the manipulated entries offer copy-and-paste steps for installing infostealers. The chats appear near the top of Google results, and avoid traditional malware downloads in favor of four everyday, often harmless actions: search, click, copy, paste. And IT pros should be concerned, according to Jonathan Semon, principal SOC analyst and co-writer of the December 9 report summary on the Huntress site, given people’s willingness to trust chatbots’ answers. “It’s stealthy, it’s quiet, it’s quick, it’s cheap, it’s scalable, and it’s most importantly, in my opinion, psychologically effective,” Semon told IT Brew. “All it takes is one admin to have a password leaked or to have a backdoor created on their machine, and that’s how ransomware gets in.” Why this scheme may feel familiar.—BH |