Attackers are abusing Google Ads and legitimate Claude.ai shared chats in an active malvertising campaign. Users searching for "Claude mac download" may come across sponsored search results that list claude.ai as the target website, but lead to instructions that install malware on their Mac.
… While AI has always been helpful with drafting resumes, it wasn't doing a great job of finding new opportunities for you. This changes with ChatGPT's new job search integration, which allows you to find relevant live roles and tailor a resume for a specific opportunity. …
… The "LLMShare" campaign, discovered by Push Security , uses Google ads to direct users searching for ChatGPT to a malicious shared ChatGPT page hosted on chatgpt.com, allowing the attack to be delivered through a legitimate OpenAI domain. …
… Microsoft researchers discovered the campaign and determined that the attack begins when users look for one of the aforementioned utilities and are presented with malicious links boosted in search rankings through SEO poisoning. …
… The LLMShare example is a good one here too: attackers were malvertising the links via search engine ads that are incredibly hard to spot showing how non-email delivery + legit site abuse + misuse of AI tools themselves can combine for maximum impact . …