Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Artificial Intelligence

Google Suing Cybercriminals Who Delivered Malware via Fake Bard Downloads

Google files a lawsuit against cybercriminals who delivered account-hijacking malware by offering fake Bard AI downloads. 

Google announced on Monday that it’s taking legal action against cybercriminals who delivered malware through websites that told users they could download Bard, the tech giant’s chat-based AI tool.

The company filed a lawsuit against what it described as “AI scammers”. The threat actor set up social media pages and ran ads promoting websites where Bard could allegedly be downloaded. Bard is available online and it does not need to be downloaded.

The malicious sites delivered malware that enabled the cybercriminals to take control of victims’ social media accounts. 

“We are seeking an order to stop the scammers from setting up domains like these and allow us to have them disabled with U.S. domain registrars. If this is successful, it will serve as a deterrent and provide a clear mechanism for preventing similar scams in the future,” Google said in a blog post.

The tech giant said it conducted approximately 300 takedowns related to this scheme since April. 

In a separate lawsuit, Google has targeted threat actors who abused the DMCA to harm competitors by submitting thousands of bogus copyright takedowns from dozens of Google accounts. 

The false DMCA requests resulted in the removal of more than 100,000 websites belonging to businesses, causing them significant financial damage.

“We hope these efforts protect and preserve the unprecedented culture of innovation in the United States. Just as AI fraudsters and copyright scammers hope to fly under the radar — we believe that appropriate legal action and working with government officials puts scammers squarely in the crosshairs of justice, promoting a safer internet for everyone,” Google said.

Advertisement. Scroll to continue reading.

Related: OpenAI Patches Account Takeover Vulnerabilities in ChatGPT

Related: Malicious Prompt Engineering With ChatGPT

Related: Major ChatGPT Outage Caused by DDoS Attack

Written By

Eduard Kovacs (@EduardKovacs) is a managing editor at SecurityWeek. He worked as a high school IT teacher for two years before starting a career in journalism as Softpedia’s security news reporter. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

People on the Move

Mike Dube has joined cloud security company Aqua Security as CRO.

Cody Barrow has been appointed as CEO of threat intelligence company EclecticIQ.

Shay Mowlem has been named CMO of runtime and application security company Contrast Security.

More People On The Move

Expert Insights

Related Content

Cybercrime

A recently disclosed vBulletin vulnerability, which had a zero-day status for roughly two days last week, was exploited in a hacker attack targeting the...

Cybercrime

The changing nature of what we still generally call ransomware will continue through 2023, driven by three primary conditions.

Cybercrime

As it evolves, web3 will contain and increase all the security issues of web2 – and perhaps add a few more.

Cybercrime

Luxury retailer Neiman Marcus Group informed some customers last week that their online accounts had been breached by hackers.

Artificial Intelligence

The CRYSTALS-Kyber public-key encryption and key encapsulation mechanism recommended by NIST for post-quantum cryptography has been broken using AI combined with side channel attacks.

Cybercrime

Zendesk is informing customers about a data breach that started with an SMS phishing campaign targeting the company’s employees.

Cybercrime

Patch Tuesday: Microsoft calls attention to a series of zero-day remote code execution attacks hitting its Office productivity suite.

Artificial Intelligence

The release of OpenAI’s ChatGPT in late 2022 has demonstrated the potential of AI for both good and bad.