Listen to the episode
TLDR
AI themed phishing and malvertising Cybercriminals are impersonating popular AI brands such as ChatGPT, Microsoft Copilot, Claude, and DeepSeek to run phishing kits, malvertising campaigns, and fake installers. One campaign sent up to...
How it works
AI themed phishing and malvertising Cybercriminals are impersonating popular AI brands such as ChatGPT, Microsoft Copilot, Claude, and DeepSeek to run phishing kits, malvertising campaigns, and fake installers. One campaign sent up to...
Red flags
- Unexpected emails about AI subscription renewals, payment updates, or policy changes urging immediate action. Sponsored search ads or social posts offering "exclusive" AI plugins, installers, or new model access that redirect through multiple domains. Lookalike domains (e.g. misspelt "chat gpt" or "copilot login" pages) requesting credit card numbers, MF
What to do
- 1Do not click, pay, install apps, or share verification codes.
- 2Verify through the official website, app, or phone number typed manually.
- 3If you already interacted, block cards or accounts and report the incident.
Source
microsoft-security
Source reviewed by Mythos Forensic Team
https://www.microsoft.com/en-us/security/blog/2026/09/10/detect-and-disrupt-ai-themed-attacks-with-microsoft-defender/FAQ
Is AI themed phishing and malvertising impersonating ChatGPT, Copilot, Claude, and DeepSeek scam pattern advisory a real scam pattern?
Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.
What are the first warning signs?
Unexpected emails about AI subscription renewals, payment updates, or policy changes urging immediate action. Sponsored search ads or social posts offering "exclusive" AI plugins, installers, or new model access that redirect through multiple domains. Lookalike domains (e.g. misspelt "chat gpt" or "copilot login" pages) requesting credit card numbers, MF
What should I do first?
Do not click, pay, install apps, or share verification codes.; Verify through the official website, app, or phone number typed manually.; If you already interacted, block cards or accounts and report the incident.
Can LegalAudit check my case?
Yes. Start a free chat and paste the message, link, sender, or payment details for triage.