Poisoned web pages expose a customer-hijacking risk in AI answers
Fraudulent contact details can enter AI answers, turning retrieval quality into a direct revenue and customer-trust risk.
Security researchers say automated campaigns are flooding user-generated sites with fake support details that sometimes surface in OpenAI's ChatGPT, Google's Gemini and Google AI Overviews. Their vendor-authored analysis says it detected attacks targeting 374 companies, but notes that poisoned answers were inconsistent across repeated queries. For brands and information services, the findings show how an agent-controlled discovery layer can redirect purchases and support relationships before customers reach an official channel.