As cited
Copy frozen at (site build).
threat intel
Attackers impersonate popular AI brands to spread malware
Sophos researchers found that threat actors are impersonating legitimate AI brands such as Perplexity, Claude, ChatGPT, and Copilot to distribute malware including information stealers, backdoors, and malicious browser extensions. Analysis of 86 managed detection and response cases flagged for AI involvement over 12 months identified 34 confirmed instances of malicious activity leveraging AI brand impersonation.
Why it matters: Organizations and end users relying on popular AI tools face credential theft and system compromise when attackers exploit trust in those brands, requiring security teams to monitor for counterfeit downloads and verify authenticity of AI applications.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
Attackers impersonate popular AI brands to spread malware
No summary had been written when this copy was frozen.
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
Attackers impersonate popular AI brands to spread malware
Threat actors impersonate major artificial intelligence (AI) brands including Perplexity, Claude, ChatGPT, and Copilot to distribute information stealers, backdoors, and malicious browser extensions. Sophos X-Ops analyzed 12 months of managed detection and response cases from July 2, 2025 through June 29, 2026 and confirmed 34 cases involving malicious AI-themed activity out of 86 initially flagged.
Why it matters: Enterprise security teams should block emails and domains spoofing popular AI tools, as users targeted by these campaigns risk credential theft and system compromise through malware payloads disguised as legitimate software.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
Attackers impersonate popular AI brands to spread malware
Threat actors impersonate major artificial intelligence (AI) brands including Perplexity, Claude, ChatGPT, and Copilot to distribute information stealers, backdoors, and malicious browser extensions. Sophos X-Ops analyzed 12 months of managed detection and response cases from July 2, 2025 through June 29, 2026 and confirmed 34 cases involving malicious AI-themed activity out of 86 initially flagged.
Why it matters: Enterprise security teams should block emails and domains spoofing popular AI tools, as users targeted by these campaigns risk credential theft and system compromise through malware payloads disguised as legitimate software.
- Source published
- First seen by Cybersecurity Tracker