---
title: "[AUTO] Attackers Poison the Data Chatbots Use"
pubDatetime: 2026-09-23T17:57:00.000Z
description: "A campaign is poisoning the data that AI chatbots draw from, serving real users with scam contact details and phishing pages."
tags: [ai-security, supply-chain, 2026, 2026-q3, 2026-09, AUTO]
---
Attackers poison AI chatbots by flooding the web with malicious pages designed to rank high in searches. [Vigilance Security researchers identified "Dark Sourcery,"](https://vigilance.security) a campaign where fake support pages, reviews, and documentation trick chatbots into serving scam phone numbers, fraudulent login pages, and phishing links as legitimate answers. The chatbot appears to be faithfully citing real sources; the poison is in the data layer, not the model itself.

This matters more than prompt injection does. Data poisoning attacks the foundation all models draw from. A chatbot can't refuse an answer it doesn't know is poisoned. [Netcraft's independent research](https://www.helpnetsecurity.com/2025/07/03/you-cant-trust-ai-chatbots-not-to-serve-you-phishing-pages-malicious-downloads-or-bad-code/) backs this threat: ChatGPT fails to identify brand login pages 34% of the time and returns potentially malicious domains.

Real users are already scammed, receiving fraudulent contact details from chatbots. Not theoretical risk anymore.

Expect more variants as chatbots replace traditional search. [Russian disinformation networks have already infiltrated chatbot responses](https://www.france24.com/en/technology/20260603-ai-chatbot-responses-polluted-pro-russian-disinformation) on geopolitical topics; targeted phishing campaigns will follow.

---

*Sources: [Vigilance Security](https://vigilance.security)  •  [Netcraft](https://www.helpnetsecurity.com/2025/07/03/you-cant-trust-ai-chatbots-not-to-serve-you-phishing-pages-malicious-downloads-or-bad-code/)*

*Coverage: [Dark Reading](https://www.darkreading.com/threat-intelligence/attackers-manipulate-ai-chatbots-mass-disinformation-phishing-campaign)  •  [France24 / NewsGuard](https://www.france24.com/en/technology/20260603-ai-chatbot-responses-polluted-pro-russian-disinformation)  •  [Barracuda / Mithril Security](https://blog.barracuda.com/2025/09/11/poisongpt-weaponizing-ai-disinformation)*

*Related on this blog: [[AUTO] Hidden Ads Target AI Models at Publisher Level](/posts/auto-hidden-ads)  •  [[AUTO] Malware campaigns weaponize AI platform trust](/posts/auto-ai-malware-delivery)  •  [[AUTO] PhantomRaven: Stealing Secrets for Bug Bounties](/posts/auto-phantomraven-bounty-stealer)*