Warning: Major fraud involving ChatGPT and Gemini! Downloading fake AI apps could drain your bank account..

Artificial Intelligence (AI) has simplified tasks related to education, employment, programming, and daily life. The use of tools like ChatGPT, Google Gemini, and Claude is growing rapidly. However, cybercriminals are now weaponizing this popularity. They are distributing fake apps and tools by leveraging the names and identities of these popular services.

At first glance, it can be difficult to distinguish these fake apps from legitimate ones. However, once installed on a device, they can activate dangerous malware. This creates risks ranging from the theft of personal information to cybercriminals gaining full control over the system. How do fake AI apps work?

The modus operandi of cybercriminals is quite straightforward. When a user attempts to download a new version of ChatGPT, Gemini, or another AI tool, they may encounter a counterfeit application that mimics the genuine app.

As soon as the user downloads and installs it, malware can infiltrate their device. This malware is capable of stealing sensitive data, monitoring system activities, and performing other malicious actions. In short, trusting an AI app solely based on a popular name can prove costly.

**A Major Threat Looms Over Developers Too**
This threat is not limited to average smartphone users. Developers are also being targeted by cybercriminals due to the increasing use of AI-based "agentic" tools.

AI agents are often granted permissions to read computer files, modify code, execute commands, and interface with various development tools. Consequently, if a developer inadvertently installs an infected AI extension, package, or tool on their system, the damage can be severe.

Once the malicious software obtains the necessary permissions, it can attempt to access sensitive files and other critical resources.

**Thousands of Malware Attacks Reported in 2026**
According to the antivirus company Kaspersky, approximately 92,000 malware-based cyberattacks utilizing the names of AI services were reported in 2026. Approximately 49 percent of these attacks have been linked to fake ChatGPT apps.

According to the report, the name 'Claude' was used in about 18 percent of cases, while a similar percentage of attacks involved fake apps linked to 'Gemini'.
During the research, over 15,000 malware samples were discovered that had been presented as 'agentic AI' software; these included dangerous programs such as Trojans and spyware.

Things to keep in mind when downloading AI apps

Before downloading any AI app, it is crucial to verify the source. An app's name and logo looking authentic does not guarantee its legitimacy.

Users should always download AI tools from official sources. It is best to avoid unknown websites, suspicious links, or installation packages obtained from third-party sources.

Developers should also carefully review the permissions granted to AI extensions, packages, and agents. Companies need to monitor their IDEs, development workspaces, and AI agent access, while also tracking the entry points through which external software accesses their systems.

The use of AI is growing rapidly, but so are the associated cyber risks. Therefore, exercising a moment of caution before downloading any new AI tool can save you from significant cyber-related damage.

Disclaimer: This content has been sourced and edited from NDTV India. While we have made modifications for clarity and presentation, the original content belongs to its respective authors and website. We do not claim ownership of the content.