TTPwire Vol. 1 · MITRE ATT&CK·Tagged

← All stories

ESET WeLiveSecurity

AI-aided malvertising: Exploiting a chatbot to spread scams

2025-10-13 · Read original ↗

ATT&CK techniques detected

4 predictions
T1566.002Spearphishing Link
85%
“at scale, and creating deepfake audio and video to trick even the most skeptical user. but as x found out recently, there ’ s another, arguably more insidious threat : a technique that has been nicknamed “ grokking ” ( it ’ s not to be confused with the grokking phenomenon observ…”
T1588.007Artificial Intelligence
60%
“ai - aided malvertising : exploiting a chatbot to spread scams we ’ ve all heard about the dangers posed by social engineering. it ’ s one of the oldest tricks in the hackers ’ book : psychologically manipulate a victim into handing over their information or installing malware. u…”
T1566.002Spearphishing Link
47%
“reach millions of impressions, potentially spreading scams and malware far and wide. - the links will also be amplified in seo and domain reputation, as grok is a highly trusted source. - researchers found hundreds of accounts repeating this process until suspended. - the links t…”
T1566.002Spearphishing Link
33%
“part of a legitimate task. in this case, a malicious link was embedded in video metadata under the post, then grok was asked “ where is this video from? ”. such attacks are on the rise. analyst firm gartner claimed recently that a third ( 32 % ) of organizations had experienced p…”

Summary

Cybercriminals have tricked X’s AI chatbot into promoting phishing scams in a technique that has been nicknamed “Grokking”. Here’s what to know about it.