Microsoft Warns of AI-Driven Cryptojacking Campaign

Microsoft has identified an active cryptojacking campaign that leverages AI chatbot interactions to surface malicious download sites. The campaign extends social engineering beyond traditional search results, making malicious software recommendations more visible to users. Microsoft Defender experts noted that the attackers use AI chatbots to lure victims into downloading cryptomining malware. The technique increases the attack surface by embedding malicious links within conversational AI outputs.

The campaign was detected through anomalous traffic patterns and the presence of cryptojacking scripts in chatbot responses. Microsoft recommends that organizations monitor chatbot interactions for suspicious URLs and block known malicious domains. The use of AI in delivery mechanisms underscores the need for advanced threat detection in conversational interfaces. Security teams should update their policies to include AI-driven phishing and cryptojacking scenarios.