GPU MINING MALWARE SPREADS VIA SEO POISONING

The malware campaign leverages multiple distribution vectors to reach victims. Attackers poison search engine results to direct users toward malicious downloads, while simultaneously compromising AI chatbot systems to recommend infected software or resources. Once installed, the malware hijacks GPU resources to mine cryptocurrency without user consent, consuming system performance and electricity. The campaign specifically targets machines with high-performance graphics cards, which offer greater mining profitability. The dual-vector approach—combining traditional SEO manipulation with emerging AI-based recommendation systems—demonstrates evolving tactics in malware distribution. Victims may encounter compromised search results when researching legitimate software, or receive malicious recommendations from chatbot interfaces. Security researchers recommend verifying software sources directly from official websites, avoiding downloads from search results alone, and monitoring system performance for unexpected GPU usage. Users should maintain updated antivirus software and exercise caution with AI chatbot recommendations for software installation.