Microsoft warns its Quick Assist app could expose Windows and macOS users to AI-driven tech support scams and “scareware”

Lately, Microsoft has advised Windows and Mac users to avoid utilizing the Quick Assist application on their computers and gadgets. According to Microsoft’s own findings, cybercriminals are exploiting artificial intelligence tactics to illegally access remote systems, potentially stealing personal data and login credentials (as reported by Forbes).

Since the advent of generative AI, its use has rapidly spread across various fields such as healthcare, education, entertainment, and IT. Despite its undeniable utility, it raises significant security and privacy issues due to potential misuse by cybercriminals exploiting the technology.

Microsoft cautions users that fraudulent tech support representatives may falsely claim affiliation with reputable tech firms and employ deceptive methods to win the confidence of potential victims.

“They then attempt to employ tools like Quick Assist to connect to the target’s device.”

Microsoft states that the widespread use of AI is significantly simplifying and reducing costs for creating convincing content used in cyberattacks, at an alarmingly quick pace. The company also explained how attackers are disguising their malicious activities using AI, presenting them as ‘tech support’ to unsuspecting users, thereby making it exceptionally challenging for novice users to distinguish between genuine assistance and fraudulent scams.

Advanced assaults encompass “scareware,” which frequently uses pop-ups or bogus device alerts resembling a problem notification demanding immediate action. It’s worth noting that the Federal Bureau of Investigation (FBI) typically finds that unsolicited tech support calls are commonly associated with scams and fraudulent activities.

Both Microsoft and Google have made clear that they won’t take the initiative to contact their users directly about any issues and ask for assistance in resolving them. The FBI further stated, ‘Genuine customer service or technical support teams will not make unsolicited approaches to people.’

As a researcher, I strongly advise against installing applications that provide remote access to your devices. Should you decide to do so, it’s crucial to reach out for support through publicly accessible channels or directly from the operating system on your device. For added security, always rely on trusted internal remote access tools such as Remote Help within your organization when necessary.

Although the report showed that Quick Assist was not affected by these advanced AI tricks, misuse of the software by malicious users presents challenges for Microsoft, as they work to minimize potential risks arising from such abuse.

Read More

2025-04-22 12:09