45
45
60
45
45
45
45
60
45
60
45
45
45
60
60
45
60
45
45
60
60
57
45
45
57
Attackers impersonate popular AI brands to spread malware
Sophos documented 38 MDR cases where attackers impersonated AI brands like Claude and Perplexity to deliver infostealers and backdoors.
Sophos X-Ops analyzed 12 months of MDR cases and confirmed 38 incidents involving AI. Software impersonation accounted for 30 cases, with Claude impersonated in 26; fake installers used an 'InstallFix' technique delivering mshta commands, in-memory payloads, and process hollowing. Malicious browser extensions posing as AI assistants, including a fake Perplexity extension with 10,000 installs, acted as infostealers. In one case, attackers used a Claude coding agent to develop a Rust remote access trojan communicating over Slack after an SQL injection compromise.
52
45
Week in review: 2 threat actors exploiting WinRAR 0-day, Microsoft fixes “BadSuccessor” Kerberos flaw
60
45
60
Week in review: MUT-1244 targets both security workers and threat actors, Kali Linux 2024.4 released
60
Week in review: New Black Basta's social engineering campaign, passing the CISSP exam in 6 weeks
60
45
57
45
57
45
45
57
60