Any.Run study: 1,258 attacks in six months impersonate Claude and ChatGPT to spread malware
Threat analysis firm Any.Run published research identifying 1,258 separate attack incidents over a six-month period, in which fake AI tools impersonate popular brands to install infostealers, software that steals passwords and data, and remote-access trojans. 60% of the cases impersonated Anthropic's Claude and 33% impersonated OpenAI's ChatGPT and Codex, delivered through fake download pages, malicious ads, and manipulated search rankings. Nearly half of the campaigns used the ClickFix technique, where an employee is tricked into copying and running an installation command themselves, while 27% used a variant relying on fake command-line tools. Researchers note that a single employee click can expose source code, cloud and AI access keys, and active work sessions. For a business that encourages staff to use AI tools, the research shows that the name of a popular tool has itself become a daily lure, and employees need clear guidance on where to actually download such software.
Sources
This summary was written automatically with AI from the public sources listed above and checked by an independent AI reviewer before publication. For full details, read the original source.