Summary

  • Malwarebytes researchers have found a series of scam adverts on Google delivering malicious malware to unsuspecting DeepSeek users.
  • The adverts, which looked to replicate Chinese-developed AI chatbot DeepSeek, directed users to a misleading website.
  • If users then download the chatbots, it actually installs the Heracles MSIL Trojan infostealer, which targets user data and private information, including cryptocurrency wallets.
  • To avoid such attacks, users should not click on sponsored adverts on Google and can check the URL of the site they are directed to, avoiding any unusual or different domains.
  • Desktop applications should not be downloaded from popular chatbot sites, as many do not offer this function.
  • Cybersecurity analysts have advised that the only way to currently use DeepSeek is by accessing it via browser extension or API integration.

By Gavin Phillips

Original Article