In Other News: Scammers Abuse Grok, US Manufacturing Attacks, Gmail Security Claims Debunked

Scammers have exploited X’s generative AI chatbot Grok to lure users to their websites. According to Guardio, Nati Tal reported that scammers bypass X’s ban on links in promoted posts by including the links in a post’s From field. The scammers then reply to the post asking Grok where the video is from, prompting the chatbot to respond with a clickable link to the cybercriminals’ site. This sequence enables the attackers to deliver malicious destinations despite platform restrictions.

The report highlights how the tactic relies on social engineering and the apparent authority of Grok’s replies to drive traffic to illegitimate sites. SecurityWeek notes that the technique demonstrates a broader challenge of moderating AI-enabled interactions on social platforms.