FakeAgent Campaign: Malicious Claude Artifact Used to Distribute SectopRAT to 29 Organisations
FakeAgent campaign exploits Anthropic Claude artifacts to distribute SectopRAT malware to 29 organizations.
Researchers at Huntress uncovered a malvertising campaign dubbed FakeAgent that abused public artifacts hosted on Anthropic's claude.ai domain to distribute the SectopRAT information-stealing Trojan. The campaign compromised at least 29 organizations between July 21–22, 2026, targeting users searching for Claude Desktop. The attack leveraged Anthropic's trusted infrastructure to evade detection and increase credibility.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Anthropic?
Get an email when a new story names Anthropic, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonAttackers in the FakeAgent campaign exploited user trust in Anthropic's legitimate claude.ai domain by hosting malicious artifacts on the platform itself, effectively weaponizing a reputable service to bypass security controls and increase victim credibility. This is a classic supply chain trust abuse: because the payload was served from a known, allowlisted domain, traditional reputation-based defenses failed to flag it. At least 29 organizations were compromised within a 48-hour window, demonstrating how rapidly malvertising campaigns can scale when leveraging trusted infrastructure. The SectopRAT infostealer deployed in this campaign can harvest credentials, browser data, and sensitive system information, making the downstream impact significant. This case underscores that domain reputation alone is not a sufficient security signal — content and behavior must also be scrutinized.
What helps against this
How we list vendors
- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.
- Threat intelligence
Attack campaigns reach your sector, suppliers or software before your team hears about them.
- Email security
Phishing, malware and invoice fraud are filtered out before they reach inboxes.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- malware — SectopRAT