Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Artificial Intelligence

Google Suing Cybercriminals Who Delivered Malware via Fake Bard Downloads

Google files a lawsuit against cybercriminals who delivered account-hijacking malware by offering fake Bard AI downloads. 

Google announced on Monday that it’s taking legal action against cybercriminals who delivered malware through websites that told users they could download Bard, the tech giant’s chat-based AI tool.

The company filed a lawsuit against what it described as “AI scammers”. The threat actor set up social media pages and ran ads promoting websites where Bard could allegedly be downloaded. Bard is available online and it does not need to be downloaded.

The malicious sites delivered malware that enabled the cybercriminals to take control of victims’ social media accounts. 

“We are seeking an order to stop the scammers from setting up domains like these and allow us to have them disabled with U.S. domain registrars. If this is successful, it will serve as a deterrent and provide a clear mechanism for preventing similar scams in the future,” Google said in a blog post.

The tech giant said it conducted approximately 300 takedowns related to this scheme since April. 

In a separate lawsuit, Google has targeted threat actors who abused the DMCA to harm competitors by submitting thousands of bogus copyright takedowns from dozens of Google accounts. 

Advertisement. Scroll to continue reading.

The false DMCA requests resulted in the removal of more than 100,000 websites belonging to businesses, causing them significant financial damage.

“We hope these efforts protect and preserve the unprecedented culture of innovation in the United States. Just as AI fraudsters and copyright scammers hope to fly under the radar — we believe that appropriate legal action and working with government officials puts scammers squarely in the crosshairs of justice, promoting a safer internet for everyone,” Google said.

Related: OpenAI Patches Account Takeover Vulnerabilities in ChatGPT

Related: Malicious Prompt Engineering With ChatGPT

Related: Major ChatGPT Outage Caused by DDoS Attack

Written By

Eduard Kovacs (@EduardKovacs) is senior managing editor at SecurityWeek. He worked as a high school IT teacher before starting a career in journalism in 2011. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join this live webinar as we break down why email-layer defenses alone can't keep pace with the modern phishing ecosystem, how agentic AI is changing the capacity equation for security teams, and more.

Register

This year's summit will help organizations learn how to utilize tools, controls, and design models needed to properly secure cloud environments. Interact with leading solution providers and other end users facing similar challenges in securing a variety of cloud deployments.

Register

People on the Move

Mark Carter has been appointed Chief Information Security Officer at Socure.

Spektrum Labs has named Mark Cravotta Chief Operating Officer.

Philip Martin has joined Uber as Chief Information Security Officer.

More People On The Move

Expert Insights

Four decades of incident response experience suggest that exploits are often the symptom, not the root cause, of today’s cybersecurity failures.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.