Search: “Anthropic”

5 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 266 Exploit / PoC 163 AI safety & security 160 AI industry 100 Malware 84 Ransomware 68 Policy & legal 57 Threat actor 57 Data breach 55 Industry 41 Model release 34 AI policy 30 Phishing & fraud 23 AI tools & infra 21

SeverityAll critical 427 high 186 medium 213 low 74 info 301

The sexy AI-powered dating app scams are here

Anthropic exposed a network of roughly 28 AI-driven dating apps using autonomous personas and gig workers to defraud paying users.

Anthropic threat intelligence uncovered a fraud network of around 28 dating apps after a prepaid account sent over 100,000 Claude API requests daily, with most chats run by autonomous AI personas and no human agent. Researchers Matthew Gore-Kormanik and Anthropic's Chris Cronbaugh documented apps including Dora, Romi, and Doni, which monetize conversations via coins; gig workers were hired only to pass liveness checks and select pregenerated replies. An operations manual written in Chinese was found inside the Doni app, and Anthropic published findings in its September 2026 AI misuse report.

The Verge · AISep 16, 14:45 UTC · 22h agoPhishing & fraud in the wild

ChatGPT at work: how chatbots help employees, but threaten business

Kaspersky SecurelistOct 13, 14:11 UTC · Oct 13, 2023Phishing & fraud

Discounted Claude access bought on the gray market may expose every prompt you send

Help Net SecurityAug 6, 00:00 UTC · Aug 6, 2026Phishing & fraud

How Threat Actors Are Turning Trusted AI Platforms Into an Attack Surface

Huntress details campaigns abusing Claude Artifacts, claude.ai/share links, and ChatGPT/Grok conversations to deliver SectopRAT, MacSync, and AMOS stealers.

Huntress SOC documented nine months of campaigns in which attackers weaponized trusted AI platform features—Claude Artifacts, public claude.ai/share links, and indexable ChatGPT/Grok conversations—to deliver malware. The July FakeAgent campaign hit more than 29 organizations via a malicious Claude Artifact posing as a Claude Desktop download page that redirected to SectopRAT. A claude.ai/share link disguised as an Apple Support guide tricked a victim into running a curl command that deployed the MacSync stealer, harvesting cookies, credentials, keychain secrets, Telegram sessions, and SSH/cloud keys, while SEO-poisoned ChatGPT and Grok conversations delivered the AMOS stealer via ClickFix-style instructions.

BleepingComputerSep 11, 14:01 UTC · 5d agoPhishing & fraud in the wild1

AI SOC vendors are selling a future that production deployments haven't reached yet

Help Net SecurityMar 26, 00:00 UTC · Mar 26, 2026Phishing & fraud