Get the App
SLTechnology News&Howtos  ›  IT Information  › 

The report says malware ads infiltrated Microsoft Bing chat.

Shulou Source: shulou.com Published: 2023-11-24 21:00:27 11月15日 Update

Thanks to CTOnews.com netizen Coje_He for the clue delivery! CTOnews.com, Sept. 29 (Xinhua) Microsoft began embedding advertising content in Bing chat in March to generate revenue to keep the project running. But this also opens the door for malware, many media and users feedback in the chat content, lead to jump links containing malware.

Microsoft will mark "Ad" ads on links in Bing chat, but in actual chat scenarios, users usually don't pay much attention to them, and some of the ads will lead to malicious software sites.

A sample of malware found by security company Malwarebytes, disguised as the mainstream "Advanced IP Scanner" utility, mentions the keyword in Bing chat and displays a malicious download link in the first link.

The malicious advertising campaign was created by a hacker who hacked into the advertising account of a legitimate Australian company and created two malicious ads aimed at system administrators (IP scanners) and lawyers (MyCase legal managers).

Clicking on a malicious advertisement in the IP scanner will take the user to a website (mynetfolderip [.] CFD) to distinguish between robots, reptiles and human victims by checking the IP address, time zone, and various system indicators of sandboxie / virtual machine.

The victim will be redirected to advenced-ip-scanner [.] Com website, which is a phishing website of Advanced IP Scanner.

The downloaded MSI installer contains three files, one of which is a highly confusing malicious script that connects to an external resource to retrieve the payload.

CTOnews.com is here to attach a link to the original report, which can be read in depth by interested users.

Tags: Malicious advertising links software users websites content Microsoft victims programs systems legal effective one three two mainstream human key words Apple Docker Huawei Linux macOS MariaDB Microsoft MySQL NVidia OPPO Reno Xiaomi MySQL macOS Docker vpn