[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fyMuzT0_s6dLLYKEsy0kpEmYZw1OcVlEJlmn4Y0k-N2U":3},{"article":4,"iocs":55,"watch_terms":66,"solutions":67,"lesson":157},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"101ace68-f27e-40a0-90e3-52982d4bb51e","How Threat Actors Are Turning Trusted AI Platforms Into an Attack Surface","how-threat-actors-are-turning-trusted-ai-platforms-into-an-attack-surface-4cfe00","Threat actors are abusing trusted AI platforms to host malicious content, poison search results, and trick users into installing malware. Huntress examines campaigns targeting AI users through weaponized Claude Artifacts, shared AI conversations, sponsored search results, and ClickFix-style lures. [...]","Threat actors are increasingly abusing legitimate features within trusted AI platforms, such as Claude Artifacts and shared ChatGPT conversations, to host malicious content and trick users into installing malware. Campaigns like FakeAgent have used these platforms to deliver malware such as SectopRAT and MacSync stealer, by creating convincing fake download pages or install guides that appear legitimate due to their hosting on trusted domains.","Threat actors exploit trusted AI platforms like Claude and ChatGPT to host malware and poison search results.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fhow-threat-actors-are-turning-trusted-ai-platforms-into-an-attack-surface\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fposts\u002F2026\u002F09\u002F08\u002Fhackers-monitoring-targets.jpg","2026-09-11T14:01:11+00:00","2026-09-11T16:00:27.861833+00:00",8,[17,20,22,24,26,29],{"name":18,"type":19},"Claude Artifacts","product",{"name":21,"type":19},"ChatGPT",{"name":23,"type":19},"Grok",{"name":25,"type":19},"Claude Desktop",{"name":27,"type":28},"Anthropic","vendor",{"name":30,"type":31},"FakeAgent","threat_actor","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":32,"icon":34,"name":35,"slug":36},null,"Threat Intelligence","threat-intelligence",[38,43,48,53],{"category":39},{"id":40,"icon":34,"name":41,"slug":42},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":44},{"id":45,"icon":34,"name":46,"slug":47},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":49},{"id":50,"icon":34,"name":51,"slug":52},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":54},{"id":32,"icon":34,"name":35,"slug":36},[56,59,62],{"type":52,"value":57,"context":58},"SectopRAT","Malware delivered via a fake Claude Desktop download page.",{"type":52,"value":60,"context":61},"MacSync stealer","Malware deployed through a fake Claude install guide.",{"type":63,"value":64,"context":65},"domain","claude.ai","Legitimate domain used to host malicious Claude Artifacts.",[27,18,21],{"controls":68,"vendors":153},[69,98,127],{"slug":70,"name":71,"problem":72,"products":73},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[74,82,90],{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"withsecure","WithSecure","\u002Fvendor-logos\u002Fwithsecure.png","elements-xdr","WithSecure Elements XDR","https:\u002F\u002Fwww.withsecure.com\u002Fen\u002Ffor-business\u002Fplatform\u002Fxdr\u002F","Endpoint detection and response with extended detection, on the Elements cloud platform.",{"vendor_slug":83,"vendor_name":84,"vendor_logo":85,"product_slug":86,"product_name":87,"url":88,"description":89},"sophos","Sophos","\u002Fvendor-logos\u002Fsophos.png","sophos-endpoint","Sophos Endpoint","https:\u002F\u002Fwww.sophos.com\u002Fen-us\u002Fproducts\u002Fendpoint-security","Endpoint protection with Intercept X anti-ransomware technology and EDR.",{"vendor_slug":91,"vendor_name":92,"vendor_logo":93,"product_slug":94,"product_name":95,"url":96,"description":97},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-insight-xdr","Falcon Insight XDR","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fendpoint-security\u002Ffalcon-insight-xdr\u002F","Endpoint detection and response with extended detection across other security tools.",{"slug":99,"name":100,"problem":101,"products":102},"email-security","Email security","Phishing, malware and invoice fraud are filtered out before they reach inboxes.",[103,111,119],{"vendor_slug":104,"vendor_name":105,"vendor_logo":106,"product_slug":107,"product_name":108,"url":109,"description":110},"darktrace","Darktrace","\u002Fvendor-logos\u002Fdarktrace.png","darktrace-email","Darktrace \u002F EMAIL","https:\u002F\u002Fwww.darktrace.com\u002Fproducts\u002Femail","Email security that flags messages deviating from normal communication patterns.",{"vendor_slug":112,"vendor_name":113,"vendor_logo":114,"product_slug":115,"product_name":116,"url":117,"description":118},"check-point","Check Point","\u002Fvendor-logos\u002Fcheck-point.png","harmony-email","Harmony Email & Collaboration","https:\u002F\u002Fwww.checkpoint.com\u002Fharmony\u002Femail-security\u002F","Email and collaboration security for Microsoft 365 and Google Workspace.",{"vendor_slug":120,"vendor_name":121,"vendor_logo":122,"product_slug":123,"product_name":124,"url":125,"description":126},"proofpoint","Proofpoint","\u002Fvendor-logos\u002Fproofpoint.png","core-email-protection","Proofpoint Core Email Protection","https:\u002F\u002Fwww.proofpoint.com\u002Fus\u002Fproducts\u002Femail-protection","Email filtering for phishing, malware and business email compromise.",{"slug":128,"name":129,"problem":130,"products":131},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",[132,138,146],{"vendor_slug":133,"vendor_name":134,"vendor_logo":135,"product_slug":133,"product_name":134,"url":136,"description":137},"hoxhunt","Hoxhunt","\u002Fvendor-logos\u002Fhoxhunt.png","https:\u002F\u002Fhoxhunt.com\u002F","Adaptive phishing simulations and micro-training, with a focus on reporting.",{"vendor_slug":139,"vendor_name":140,"vendor_logo":141,"product_slug":142,"product_name":143,"url":144,"description":145},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-sat","Huntress Managed Security Awareness Training","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fsecurity-awareness-training","Security awareness training and phishing simulation, managed for you.",{"vendor_slug":147,"vendor_name":148,"vendor_logo":149,"product_slug":147,"product_name":150,"url":151,"description":152},"sosafe","SoSafe","\u002Fvendor-logos\u002Fsosafe.png","SoSafe Awareness Platform","https:\u002F\u002Fsosafe-awareness.com\u002F","Behaviour-based awareness training and phishing simulation in many languages.",[154],{"slug":139,"name":140,"logo_path":141,"roles":155},[156],"reported_by",{"slug":158,"title":159,"body":160,"framework_refs":161,"framework_notes":173},"attackers-weaponize-trusted-ai-platforms-to-deliver-malware","Attackers Weaponize Trusted AI Platforms to Deliver Malware","Threat actors are exploiting the implicit trust users place in well-known AI platforms like Claude and ChatGPT by hosting malicious content — such as fake download pages and fraudulent install guides — directly on these domains. Because the content is served from legitimate, reputable URLs, traditional domain-reputation defenses often fail to flag it as suspicious. Campaigns like FakeAgent demonstrate that attackers no longer need to stand up their own infrastructure when they can piggyback on trusted third-party services to deliver sophisticated stealers and remote access trojans. This matters because users and security tools alike are conditioned to trust recognized brand domains, creating a dangerous blind spot that bypasses conventional phishing filters.",[162,163,164,165,166,167,168,169,170,171,172],"CIS Control 2: Inventory and Control of Software Assets","CIS Control 9: Email and Web Browser Protections","CIS Control 14: Security Awareness and Skills Training","NIST SP 800-53 SI-3: Malicious Code Protection","NIST SP 800-53 SA-9: External System Services","NIST SP 800-53 AT-2: Literacy Training and Awareness","NIST CSF DE.CM-4: Malicious Code Detection","MITRE ATT&CK T1608.001: Stage Capabilities – Upload Malware","MITRE ATT&CK T1566.002: Phishing – Spearphishing Link","ISO\u002FIEC 27001 A.8.23: Web Filtering","GDPR Article 32: Security of Processing (where personal data is exfiltrated by stealers)",{}]