Threat actors are exploiting ChatGPT and Claude's content-sharing features to distribute malware through fake outage pages and installation guides. The attacks leverage trusted domains to bypass security detection.
Attackers are abusing the chat-sharing functionality in both ChatGPT and Anthropic's Claude to deliver malware to unsuspecting users.
■ Attack Methods
The primary tactic involves creating fake OpenAI outage pages hosted on shared ChatGPT links. These pages direct users to download what appears to be the ChatGPT desktop application, but actually distributes malware instead.
A secondary approach uses shared conversations that mimic error messages or software installation guides. These deceptive chats slip past security tools because they're hosted on legitimate, trusted domains owned by OpenAI and Anthropic.
■ Why It Works
The attacks succeed due to domain trust. Security filters and user instincts typically allow traffic from well-known services like ChatGPT and Claude. Hosting malware on these domains makes detection significantly harder for both automated systems and manual review.
Shared chat links appear legitimate on the surface, making social engineering more effective. Users encountering what looks like an official status page or error message are more likely to follow instructions without verification.
■ Implications
This represents a growing attack surface created by AI service features designed for convenience. Share links intended to facilitate collaboration and content distribution are being weaponized to distribute malware at scale.
Both OpenAI and Anthropic will need to implement stricter controls over shared content to prevent malicious use. This includes better monitoring for patterns indicative of malware distribution and faster takedown procedures.
Users should exercise caution with shared links from unfamiliar sources and verify software downloads directly from official websites rather than following links in chat conversations or status pages.
An Estonian government benchmark evaluated dozens of large language models on their ability to resist Russian strategic narratives. The results reveal significant variations in how different AI systems handle disinformation.
Anthropic has released an open-source framework designed to leverage AI for identifying security vulnerabilities in code. The tool, available on GitHub, has generated significant interest in the developer community.
Elon Musk is attempting to escape Federal Trade Commission oversight of X's data handling practices. Public commenters have warned the FTC that Musk cannot be trusted to protect user privacy.
European and international law enforcement agencies have dismantled nine organized crime groups and arrested 29 suspects in a coordinated crackdown on illegal streaming operations.