AI brands as bait: How threat actors are using the AI hype in social engineering

As threat actors operationalize AI to accelerate attacks, they are also leveraging the wider global interest around AI itself as a social engineering lure. The post AI brands as bait: How threat actors are using the AI hype in social engineering appeared first on Microsoft Security Blog .

In this article ChatGPT-themed lure leads to phishing kit collecting credit card data Claude-themed phishing campaign collected credentials and access tokens "Awesome AI Windows Plugin” malvertising deploys Vidar stealer Fake DeepSeek V4 installers on GitHub delivered Vidar Stealer Mitigation and protection guidance Microsoft Defender detections Indicators of compromise As threat actors operationalize AI to accelerate attacks, they are also leveraging the wider global interest around AI itself as a social engineering lure.

In recent months, Microsoft Threat Intelligence has observed a growing number of campaigns that impersonate the branding of popular AI platforms such as ChatGPT, Microsoft Copilot, DeepSeek, and Anthropic’s Claude as lures.