Threat actors are distributing cryptojacking malware targeting high-performance systems through a coordinated campaign that exploits SEO poisoning and manipulates AI chatbot recommendations.
The malware campaign leverages multiple distribution vectors to reach victims. Attackers poison search engine results to direct users toward malicious downloads, while simultaneously compromising AI chatbot systems to recommend infected software or resources.
Once installed, the malware hijacks GPU resources to mine cryptocurrency without user consent, consuming system performance and electricity. The campaign specifically targets machines with high-performance graphics cards, which offer greater mining profitability.
The dual-vector approach—combining traditional SEO manipulation with emerging AI-based recommendation systems—demonstrates evolving tactics in malware distribution. Victims may encounter compromised search results when researching legitimate software, or receive malicious recommendations from chatbot interfaces.
Security researchers recommend verifying software sources directly from official websites, avoiding downloads from search results alone, and monitoring system performance for unexpected GPU usage. Users should maintain updated antivirus software and exercise caution with AI chatbot recommendations for software installation.
U.S. federal prosecutors have unsealed charges against three Russian nationals accused of operating a bulletproof hosting service that supported ransomware gangs responsible for over $62 million in damages worldwide.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that attackers are actively exploiting three vulnerabilities in Internet-exposed on-premises SharePoint Server instances. Organizations running affected versions must patch immediately.
Tailscale disclosed a critical vulnerability in its SSH implementation that allowed attackers to gain root access through insecure argument handling. The flaw has been patched in recent versions.
A new study found that social media platforms referred over 5.7 million visits to nonconsensual deepfake pornography sites between December 2025 and March 2026, with YouTube and X accounting for the majority of traffic.