CyberSIXT Search
Research reports

dev.toPublished

Cryptojacking Abusing AI Chatbot Recommendations — A New Delivery Vector Beyond Search Poisoning

By Dennis Kim

Excerpt

id

title

subtitle

author

email

github

date

classification

severity

Cryptojacking Abusing AI Chatbot Recommendations — A New

Delivery Vector Beyond Search Poisoning

CTI-2026-0527-AICRYPTOJACK

Cryptojacking Abusing AI Chatbot Recommendations — A New Delivery Vector Beyond Search Poisoning

LLM-recommended download links lead to malicious sites; a GPU-targeting mining, remote-access, and ransomware composite campaign

Dennis Kim (김호광 / HoKwang Kim)

gameworker@gmail.com

gameworkerkim

2026-05-27

TLP:GREEN

HIGH

lang en

tags

threat_actors

frameworks

license CC BY-NC-SA 4.0

C…

The opening of the report, shown for reference. The full report, with its figures and indicators, is published by dev.to on dev.to.

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.

↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device