A series of scam DeepSeek adverts on Google are delivering dangerous infostealer malware to unsuspecting DeepSeek users—but there are a few tell-tale signs that’ll help you stay safe.
Watch Out For These Fake DeepSeek Adverts
Malwarebytes researchersfirst spotted the fake DeepSeek adverts in late March 2025.
These malicious DeepSeek adverts take anyone seeking the Chinese-developed AI chatbot to a fake website designed to look like the real deal. If you click the download link on the fake website, it downloads the Heracles MSIL Trojan, an infostealer designed to target user data, private information, and particularly cryptocurrency wallets.
According to the Malwarebytes blog, the actual fake adverts aren’t particularly convincing. From the example below, you can see the difference between a regular DeepSeek Google advert and the fake version:
However, if you land on the fake DeepSeek link, the phishing page is much more convincing:
It has some key differences from the real DeepSeek website (pictured above), but it’s a convincing replica that could catch you out.
How to Avoid Fake DeepSeek Adverts in Google Search
Unfortunately, fake Google adverts are a major problem affecting many tech companies. In February 2025,Malwarebytes researchers discovered a campaign targeting Microsoft, attempting to trick people into downloading malware.
This time around, the AI chatbot DeepSeek is the lure. Since its early 2025 launch,DeepSeek has become one of the most popular AI chatbots, with many folkspreferring DeepSeek to ChatGPT. Its popularity is why we’re now seeing fake DeepSeek adverts used to deliver infostealer malware.
Thankfully, it’s relatively simple to avoid the fake DeepSeek adverts on Google.
In short, if you’re unsure whether you’re on the right website, double-check the URL, and if anything seems untoward, just close the page.
