Beware: Deceptive DeepSeek Ads Spread Harmful Malware

A series of scam ads for DeepSeek on Google are distributing dangerous infostealer malware to unsuspecting users. Fortunately, there are a few warning signs that can help you protect yourself.

Beware of Fake DeepSeek Ads

Researchers from Malwarebytes first identified the fraudulent DeepSeek ads in late March 2025.

These deceptive ads mislead anyone looking for the Chinese-developed AI chatbot to a counterfeit website designed to mimic the authentic site. If you click the download link on this fake site, it will install the Heracles MSIL Trojan—an infostealer aimed at compromising user data, personal information, and especially cryptocurrency wallets.

As noted by the Malwarebytes blog, these fake ads are not very convincing. Here’s a comparison of a legitimate DeepSeek Google ad and its fraudulent counterpart:

If you find yourself on the fraudulent DeepSeek link, the phishing page looks remarkably convincing:

While there are some key differences from the real DeepSeek site (shown above), it’s a sneaky imitation that could easily deceive you.

Tips to Avoid Fake DeepSeek Ads in Google Search

Sadly, fake adverts on Google are a widespread issue impacting numerous tech companies. In February 2025, Malwarebytes found a campaign aimed at Microsoft that attempted to mislead users into downloading malware.

This time, the AI chatbot DeepSeek is being used as bait. Since its launch in early 2025, DeepSeek has risen to fame as one of the top AI chatbots, even surpassing ChatGPT in popularity for many users. Its growing reputation is why we are now encountering scam ads targeting DeepSeek to distribute infostealer malware.

Fortunately, it’s pretty easy to steer clear of these fraudulent DeepSeek adverts on Google.

1. Start by avoiding sponsored ads on Google, especially those related to DeepSeek. In general, it’s smart to skip over them, as scammers frequently use these ads to entice users into clicking on harmful links.
2. Always double-check the URL of the website you’re visiting. The official DeepSeek site can be found at deepseek.com. That is the only legitimate link.
3. As of now, there is no official DeepSeek desktop application. While you can access DeepSeek on your PC or laptop, it’s not a typical “desktop application” that you would download directly from DeepSeek.
4. The fake DeepSeek site typically features a prominent Download button that does not exist on the authentic DeepSeek site.

In summary, if you’re uncertain about whether you’re on the correct website, verify the URL. If anything raises red flags, it’s best to exit the page.