Threat Actors Phish Credentials Using AI Brand Lures

Threat actors are now weaponizing the branding of leading artificial intelligence platforms, including ChatGPT, Claude, and DeepSeek. These campaigns disguise phishing attacks, luring users into divulging sensitive data like login credentials, credit card numbers, and authentication tokens.

The surge in AI adoption has given attackers fertile ground to exploit. Millions of people now rely on AI assistants daily, and many are still learning what legitimate communications from these platforms look like.

This creates the perfect window for fraud. Attackers dress up a fake page or email to resemble a trusted AI platform, and a significant number of people click without a second thought.

Microsoft Threat Intelligence analysts identified and documented several of these campaigns that unfolded in early 2026.

Microsoft said in a report shared with Cyber Security News (CSN) that these campaigns do not represent any actual breach of the AI services themselves.

They are pure social engineering operations that borrow trusted brand names to push users into clicking a link, opening a PDF, or downloading a file.

What makes these attacks harder to stop is that attackers route victims through real, trusted services before reaching the malicious destination.

Platforms like URL shorteners, CRM tools, and GitHub are layered into the chain to avoid detection. By the time someone realizes something is wrong, their information may already be gone.

The consequences are serious, as thousands of organizations across multiple countries have been targeted, with victims losing credit card data, account access, and authentication tokens that hand attackers a direct entry point into corporate systems.

Threat Actors Abuse ChatGPT, Claude, and DeepSeek Brands

The ChatGPT-themed campaign detected on May 5, 2026 shows how this works in practice.

Attackers sent around 4,500 emails to targets in South Africa, warning that their ChatGPT Plus subscription would be downgraded unless they updated their payment method within seven days.

The emails carried the ChatGPT logo and a clickable update button that looked entirely legitimate.

That button did not send users directly to a malicious site. Victims were bounced through a CRM service, an Amazon tracking domain, and a URL shortener before landing on a compromised website where a fake payment page sat inside a subfolder.

The page showed a fake CAPTCHA to filter automated scanners, then collected personal details and full credit card information across two steps.

The Claude-themed campaign ran from April 20 to 22, 2026, reaching more than 2,000 organizations in the United States, the United Kingdom, and India.

Emails claimed the recipient’s account had violated usage policies, with a PDF named “Fill and Sign Claude Appeal Form.pdf” directing users to an attacker-controlled domain.

Victims were pushed through fake verification screens before being redirected toward what appeared to be a Microsoft sign-in page designed to steal access tokens.

Fake DeepSeek Installer and Malvertising Drop Vidar

In April 2026, attackers moved fast after DeepSeek previewed its V4 model.

Within 45 minutes, a fake GitHub organization called DeepSeek-V4 was live, loaded with stolen branding, real benchmark data, and search-optimized tags designed to rank high in both traditional and AI-assisted search results.

Users who downloaded the archives received a loader that silently installed Vidar infostealer on their devices.

A separate malvertising campaign linked to Storm-3075 pushed a fake product called “Awesome AI Windows Plugin” through free movie streaming sites.

The download was a fraudulently code-signed executable tied to Fox Tempest, a group running a malware-signing service used by multiple criminal actors.

Once users launched the file and clicked a “Continue” prompt, a Python downloader quietly fetched Vidar from an attacker-controlled server.

To reduce exposure, users and organizations should enable multi-factor authentication on all accounts and avoid clicking links or downloading files from unsolicited emails.

AI platform communications should always be verified by visiting the official website directly. Organizations should also deploy email link scanning tools and solutions that detect and block phishing pages before users ever reach the malicious content.

Indicators of Compromise (IoCs):-

Note: IP addresses and domains are intentionally defanged (e.g., [.]) to prevent accidental resolution or hyperlinking. Re-fang only within controlled threat intelligence platforms such as MISP, VirusTotal, or your SIEM.

Disclaimer: HackersRadar reports on cybersecurity threats and incidents for informational and awareness purposes only. We do not engage in hacking activities, data exfiltration, or the hosting or distribution of stolen or leaked information. All content is based on publicly available sources.