EVERYTHING
According to Antikor, cybercriminals are leveraging advanced techniques to integrate fake e-commerce sites directly into the search results and recommendations provided by popular AI assistants like ChatGPT. This dangerous trend targets consumers who ask chat bots for product or brand suggestions, transforming artificial intelligence into a vector for financial fraud.
The Mechanics of Data Poisoning
Security experts explain that these criminals utilize a tactic known as data poisoning. The process begins when malicious actors mass-create clone websites designed to mimic the design and appearance of well-known brands. These fraudulent sites are then used to pollute the internet's knowledge base.
When AI systems, such as ChatGPT, scan the network to update their information, they ingest this harmful content, treating it as legitimate data. Consequently, the AI begins generating seemingly accurate responses—including prices and product trends—while simultaneously recommending these dangerous, cloned websites to users.
Identifying Fraudulent E-commerce Sites
While criminal resources are often highly professional and convincing, several key details can expose them. Experts advise consumers to look out for specific red flags when browsing online:
- Anomalous Discounts: The sites frequently offer branded items with extreme discounts, sometimes reaching up to 80%.
- Suspicious URLs: Scammers use domain names that are similar to the originals but include extra or misleading words.
- Payment Methods: Fake websites often insist on direct bank transfers to a personal card or account, bypassing standard and secure online payment gateways.
The primary goal of these operations is not merely to steal money for goods, but to completely compromise banking details—including card numbers, expiration dates, and CVV codes—for subsequent unauthorized withdrawals.
Digital Hygiene: Safe Online Shopping
National Trading Standards caution that consumers should never rely solely on a website's recommendation from an AI assistant. Criminals adapt to new technologies with remarkable speed. To maintain digital hygiene and shop safely online, experts recommend several practices:
- Avoid Trap Words: Be wary of extra words in the site name or URL such as "official," "online," or "sale."
- Manual Verification: Instead of clicking links provided by a chat bot, manually type the official website address of the desired brand into a search engine.
- Source Confirmation: Always purchase items either from the brand's official site or through verified retailers.
If a user suspects they have entered data on a fraudulent site, immediate action is required: block the card via mobile banking, notify the bank of the data compromise, and report the incident to Cyberpolice. This vigilance remains crucial as AI continues to evolve.