How Threat Actors Are Turning Trusted AI Platforms Into an Attack Surface
Huntress details campaigns abusing Claude Artifacts, claude.ai/share links, and ChatGPT/Grok conversations to deliver SectopRAT, MacSync, and AMOS stealers.
Huntress SOC documented nine months of campaigns in which attackers weaponized trusted AI platform features—Claude Artifacts, public claude.ai/share links, and indexable ChatGPT/Grok conversations—to deliver malware. The July FakeAgent campaign hit more than 29 organizations via a malicious Claude Artifact posing as a Claude Desktop download page that redirected to SectopRAT. A claude.ai/share link disguised as an Apple Support guide tricked a victim into running a curl command that deployed the MacSync stealer, harvesting cookies, credentials, keychain secrets, Telegram sessions, and SSH/cloud keys, while SEO-poisoned ChatGPT and Grok conversations delivered the AMOS stealer via ClickFix-style instructions.
- FakeAgent hit 29+ organizations via malicious Claude Artifact delivering SectopRAT
- claude.ai/share page posing as Apple Support guide deployed MacSync stealer via curl command
- SEO-poisoned ChatGPT/Grok conversations delivered AMOS stealer through ClickFix-style troubleshooting lures
- Attacks exploit trust in legitimate AI domains; restrict clipboard script execution and allow-list apps
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | claude.ai | started with a malicious Claude Artifact hosted on the real claude.ai domain. Since public Artifacts are meant for lightweight de |
| domain | grok.com | : shared, indexable conversations hosted on chatgpt.com and grok.com that can rank for troubleshooting searches. Each of these s |
From the original article
3 min read at bleepingcomputer.com
Threat actors are abusing trusted AI platforms to host malicious content, poison search results, and trick users into installing malware. Huntress examines campaigns targeting AI users through weaponized Claude Artifacts, shared AI conversations, sponsored search results, and ClickFix-style lures. [...]
By Sponsored by Huntress Labs · bleepingcomputer.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.