How Threat Actors Are Turning Trusted AI Platforms Into an Attack Surface
Threat actors exploit trusted AI platforms like Claude and ChatGPT to host malware and poison search results.
Threat actors are increasingly abusing legitimate features within trusted AI platforms, such as Claude Artifacts and shared ChatGPT conversations, to host malicious content and trick users into installing malware. Campaigns like FakeAgent have used these platforms to deliver malware such as SectopRAT and MacSync stealer, by creating convincing fake download pages or install guides that appear legitimate due to their hosting on trusted domains.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Anthropic?
Get an email when a new story names Anthropic, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonThreat actors are exploiting the implicit trust users place in well-known AI platforms like Claude and ChatGPT by hosting malicious content — such as fake download pages and fraudulent install guides — directly on these domains. Because the content is served from legitimate, reputable URLs, traditional domain-reputation defenses often fail to flag it as suspicious. Campaigns like FakeAgent demonstrate that attackers no longer need to stand up their own infrastructure when they can piggyback on trusted third-party services to deliver sophisticated stealers and remote access trojans. This matters because users and security tools alike are conditioned to trust recognized brand domains, creating a dangerous blind spot that bypasses conventional phishing filters.
What helps against this
How we list vendors
- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.
- Email security
Phishing, malware and invoice fraud are filtered out before they reach inboxes.
- Security awareness training and phishing simulation
People recognise and report attacks instead of falling for them.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- malware — SectopRAT
- malware — MacSync stealer
- domain — claude.ai