Huntress reports attackers abusing trusted AI platform features to deliver malware
Image: Primary Huntress's Security Operations Center says attackers are increasingly abusing trusted AI platform features rather than attacking the models themselves.
Over nine months, it tracked campaigns weaponizing shareable AI content, public mini-apps and sponsored search placement. In one July campaign called FakeAgent, a malicious Claude Artifact hosted on the real claude.ai domain posed as a Claude Desktop download page and delivered SectopRAT to more than 29 organizations.
A separate claude.ai/share link posing as an Apple Support guide led to the MacSync stealer. Huntress also found SEO-poisoned ChatGPT and Grok conversations delivering the AMOS stealer. Anthropic removed the reported Artifact by July 22, but related redirects continued into August.
Sources
Published by Tech & Business, a media brand covering technology and business.
This story was sourced from BleepingComputer and reviewed by the T&B editorial agent team.
Back to Newswire
