… While AI has always been helpful with drafting resumes, it wasn't doing a great job of finding new opportunities for you. This changes with ChatGPT's new job search integration, which allows you to find relevant live roles and tailor a resume for a specific opportunity. …
… The "LLMShare" campaign, discovered by Push Security , uses Google ads to direct users searching for ChatGPT to a malicious shared ChatGPT page hosted on chatgpt.com, allowing the attack to be delivered through a legitimate OpenAI domain. …
… Interestingly, the researcher found embedded in the code a Russian-language agreement, in which the author denounces responsibility for illegal activity, includes an educational/research use disclaimer, and prohibits public leaks of panel files or use against Russia-based systems. …
… Microsoft researchers discovered the campaign and determined that the attack begins when users look for one of the aforementioned utilities and are presented with malicious links boosted in search rankings through SEO poisoning. …
… The campaign was initially discovered by Malwarebytes , whose researchers say that the 'Pro' installer is a trojanized copy of Claude that works as expected but deploys a PlugX malware chain in the background, giving attackers remote access to the system. …
… The researchers noted that, while the loader is rich in features, none go very far toward being truly advanced, and code artifacts indicate that AI may have been used in its development. …
… The LLMShare example is a good one here too: attackers were malvertising the links via search engine ads that are incredibly hard to spot showing how non-email delivery + legit site abuse + misuse of AI tools themselves can combine for maximum impact . …