Detect and disrupt AI-themed attacks with Microsoft Defender

Microsoft Threat Intelligence documents a rising wave of AI-branded social engineering campaigns that impersonate popular AI services (ChatGPT, Copilot, Claude, DeepSeek) to deliver phishing, adversary-in-the-middle credential theft, malvertising, and malware (including the Vidar stealer). These campaigns leverage urgency and brand trust, use multi-stage redirect chains and disposable infrastructure, have been observed at scale (e.g., a ChatGPT-themed phishing run sending ~100,000 emails in a day), and are being mitigated by Microsoft Defender capabilities such as Safe Links, Safe Attachments, and attack disruption.