Kaspersky reveals DeepSeek AI malware campaign

Kaspersky has uncovered a sophisticated cyber deception campaign exploiting the rising popularity of DeepSeek AI to distribute malware via fraudulent websites. Cybercriminals created fake DeepSeek domains, such as "deepseek-pc-ai[.]com", using geofencing technology to tailor attacks by region and evade detection.

A key tactic involved compromising an Australian company’s X account, amplifying malicious links through bot-generated reposts, reaching 1.2 million impressions. Visitors downloading the fake DeepSeek AI client unknowingly installed malware, granting attackers remote access to their systems via PowerShell scripts.

Kaspersky recommends: Verify URLs to avoid deceptive AI sites. Use security solutions like Kaspersky Premium to block threats. Keep software updated to prevent vulnerabilities.

Stay vigilant against evolving cyber threats.

10-05-2025