[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fep3YvycwtRGAgr_D2rcnnZXqB6AFbt5cy1o_WVVqsQk":3},{"article":4,"iocs":45,"watch_terms":46,"solutions":47,"lesson":135},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":27,"category":28,"article_tags":32},"6a8d3b87-2eac-4815-857c-1540e96f320d","Attackers Manipulate AI Chatbots in Mass Disinformation, Phishing Campaign","attackers-manipulate-ai-chatbots-in-mass-disinformation-phishing-campaign-071e17","Threat actors are poisoning ChatGPT, Gemini, and Google AI Overview answers by seeding the Web with malicious links and data and then optimizing the content.","Threat actors are actively manipulating major AI chatbots, including ChatGPT, Gemini, and Google AI Overview, by poisoning web content with malicious links and data. This tactic aims to influence the AI's responses, thereby spreading disinformation and facilitating phishing attacks through seemingly legitimate AI-generated answers.","Attackers poison AI chatbots like ChatGPT and Gemini with malicious links for disinformation and phishing.","https:\u002F\u002Fwww.darkreading.com\u002Fthreat-intelligence\u002Fattackers-manipulate-ai-chatbots-mass-disinformation-phishing-campaign","https:\u002F\u002Feu-images.contentstack.com\u002Fv3\u002Fassets\u002Fblt6d90778a997de1cd\u002Fbltdc4ade55d77fb4ff\u002F6ab3b76557365fe244f410ae\u002Fchatbot_khunkornStudio_shutterstock.jpg?width=720&quality=80&disable=upscale","2026-09-23T14:47:09+00:00","2026-09-23T20:00:47.857381+00:00",8,[17,20,22,24],{"name":18,"type":19},"ChatGPT","product",{"name":21,"type":19},"Gemini",{"name":23,"type":19},"Google AI Overview",{"name":25,"type":26},"AI chatbots","technology","839da5c1-3c34-47e2-9499-f7201640e3ac",{"id":27,"icon":29,"name":30,"slug":31},null,"AI Security","ai-security",[33,35,40],{"category":34},{"id":27,"icon":29,"name":30,"slug":31},{"category":36},{"id":37,"icon":29,"name":38,"slug":39},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":41},{"id":42,"icon":29,"name":43,"slug":44},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18,21,23],{"controls":48,"vendors":131},[49,77,102],{"slug":44,"name":50,"problem":51,"products":52},"Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",[53,61,69],{"vendor_slug":54,"vendor_name":55,"vendor_logo":56,"product_slug":57,"product_name":58,"url":59,"description":60},"recorded-future","Recorded Future","\u002Fvendor-logos\u002Frecorded-future.png","recorded-future-cyber-operations","Recorded Future Cyber Operations","https:\u002F\u002Fwww.recordedfuture.com\u002Fproducts\u002Fcyber-operations","Threat intelligence built into security operations workflows, to prioritise alerts and act on threats before they arrive.",{"vendor_slug":62,"vendor_name":63,"vendor_logo":64,"product_slug":65,"product_name":66,"url":67,"description":68},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-adversary-intelligence","Falcon Adversary Intelligence","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fthreat-intelligence\u002F","Threat intelligence on the adversaries CrowdStrike tracks, built into the Falcon platform to detect, disrupt and defend against them.",{"vendor_slug":70,"vendor_name":71,"vendor_logo":72,"product_slug":73,"product_name":74,"url":75,"description":76},"google","Google","\u002Fvendor-logos\u002Fgoogle.png","google-threat-intelligence","Google Threat Intelligence","https:\u002F\u002Fcloud.google.com\u002Fsecurity\u002Fproducts\u002Fthreat-intelligence","Threat intelligence from Mandiant's frontline investigations, Google's threat analysts, open sources and Google's own visibility, in one service.",{"slug":31,"name":78,"problem":79,"products":80},"AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[81,89,97],{"vendor_slug":82,"vendor_name":83,"vendor_logo":84,"product_slug":85,"product_name":86,"url":87,"description":88},"boomi","Boomi","\u002Fvendor-logos\u002Fboomi.png","boomi-agentstudio","Boomi Agentstudio","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fagentstudio\u002F","Agent builder whose Agent Control Tower registers and monitors Boomi agents and agents on Amazon Bedrock, Microsoft Copilot and other platforms, keeps audit logs and can switch agents off where the provider allows it.",{"vendor_slug":90,"vendor_name":91,"vendor_logo":92,"product_slug":93,"product_name":94,"url":95,"description":96},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","prisma-airs","Prisma AIRS","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fai-security\u002Fprisma-airs","Security for AI applications, models and agents, including runtime protection against prompt injection.",{"vendor_slug":82,"vendor_name":83,"vendor_logo":84,"product_slug":98,"product_name":99,"url":100,"description":101},"boomi-ai-gateway","Boomi AI Gateway","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fai-gateway\u002F","Gateway for AI model and MCP tool traffic, built on Lunar.dev technology. It limits which tools each agent can call. Its enterprise version adds an approval step for new MCP servers and logs each call with the user or agent behind it.",{"slug":103,"name":104,"problem":105,"products":106},"email-security","Email security","Phishing, malware and invoice fraud are filtered out before they reach inboxes.",[107,115,123],{"vendor_slug":108,"vendor_name":109,"vendor_logo":110,"product_slug":111,"product_name":112,"url":113,"description":114},"cloudflare","Cloudflare","\u002Fvendor-logos\u002Fcloudflare.png","cloudflare-email-security","Cloudflare Email Security","https:\u002F\u002Fwww.cloudflare.com\u002Fsase\u002Fproducts\u002Femail-security\u002F","Email filtering for phishing and business email compromise.",{"vendor_slug":116,"vendor_name":117,"vendor_logo":118,"product_slug":119,"product_name":120,"url":121,"description":122},"mimecast","Mimecast","\u002Fvendor-logos\u002Fmimecast.png","mimecast-email-security","Mimecast Email Security","https:\u002F\u002Fwww.mimecast.com\u002Fproducts\u002Femail-security\u002F","Email filtering, impersonation protection and continuity.",{"vendor_slug":124,"vendor_name":125,"vendor_logo":126,"product_slug":127,"product_name":128,"url":129,"description":130},"check-point","Check Point","\u002Fvendor-logos\u002Fcheck-point.png","harmony-email","Harmony Email & Collaboration","https:\u002F\u002Fwww.checkpoint.com\u002Fharmony\u002Femail-security\u002F","Email and collaboration security for Microsoft 365 and Google Workspace.",[132],{"slug":70,"name":71,"logo_path":72,"roles":133},[134],"affected",{"slug":136,"title":137,"body":138,"framework_refs":139,"framework_notes":150},"ai-chatbots-weaponized-via-web-content-poisoning-for-phishing-disinformation","AI Chatbots Weaponized via Web Content Poisoning for Phishing & Disinformation","Threat actors are exploiting a fundamental trust gap in AI chatbot systems by poisoning publicly indexed web content with malicious links and fabricated data, causing models like ChatGPT, Gemini, and Google AI Overview to surface and amplify harmful material as if it were legitimate. This form of indirect prompt injection and content poisoning undermines the perceived authority of AI-generated responses, making phishing lures significantly more convincing to end users who trust AI outputs. The root problem lies in insufficient validation of training and retrieval data sources, combined with a lack of end-user awareness that AI outputs can be manipulated. As AI assistants become primary information interfaces for millions of users, the blast radius of a single poisoned content campaign scales dramatically. Organizations that fail to educate employees about AI output risks and configure AI tool usage policies are particularly exposed.",[140,141,142,143,144,145,146,147,148,149],"CIS Control 14 – Security Awareness and Skills Training","CIS Control 9 – Email and Web Browser Protections","NIST SP 800-53 AT-2 – Literacy Training and Awareness","NIST SP 800-53 SI-3 – Malicious Code Protection","NIST AI RMF – GOVERN 1.1, MAP 2.3 (AI Risk Identification & Transparency)","NIST SP 800-218A – Secure Software Development for AI\u002FML","GDPR Article 5(1)(d) – Accuracy of Data","GDPR Article 25 – Data Protection by Design and by Default","MITRE ATLAS – AML.T0054 LLM Prompt Injection via Web Content","ISO\u002FIEC 42001 – AI Management System Standard",{}]