Reported by 2 outlets

Timeline

1. original reporting

   Attackers are abusing trusted AI platforms to make malicious downloads and instructions look legitimate. @HuntressLabs examines campaigns us

   www.bleepingcomputer.com · 32d ago · September 11th, 2026

   Attackers are abusing trusted AI platforms to make malicious downloads and instructions look legitimate. @HuntressLabs examines campaigns us

   via X https://www.bleepingcomputer.com/news/security/how-threat-actors-are-turning-trusted-ai-platforms-into-an-attack-surface/

2. update from bleepingcomputer.com

   How Threat Actors Are Turning Trusted AI Platforms Into an Attack Surface

   bleepingcomputer.com · 32d ago · September 11th, 2026

   As AI platforms become part of daily workflows, attackers have found a new way in: the platforms themselves. The Huntress Security Operations Center (SOC) says the bigger day-to-day risk comes from threat actors abusing the AI features people already trust and rely on, rather than attacks on the AI companies or models themselves. Over the past nine months, Huntress has tracked incidents in which attackers weaponized shareable AI content, public mini-apps, and sponsored search placement to target AI users and deliver malware. Legitimate features, hijacked Huntress has observed threat actors abuse a handful of real AI platform features, including: Claude Artifacts: content Claude generates and displays in a chat preview pane, which users can publish and share via a public link. claude.ai/share links: shareable URLs created when someone publishes a Claude conversation; these can surface in search engines when posted to crawlable spots like forums or social media. ChatGPT and Grok conversations: shared, indexable conversations hosted on chatgpt.com and grok.com that can rank for troubleshooting searches. Each of these sits inside a trust boundary. These campaigns often only run for hours or days before a provider pulls the content down, but that's enough time to trick victims before getting caught. If you were hit with ransomware, what would you do?

3. update from osintsights.com

   Threat Actors Exploit Trusted AI Platforms to Deliver Malware Beware: hackers are exploiting trusted AI platforms by turning their helpful f

   osintsights.com · 32d ago · September 11th, 2026

   Threat Actors Exploit Trusted AI Platforms to Deliver Malware Beware: hackers are exploiting trusted AI platforms by turning their helpful f

   via Mastodon https://osintsights.com/threat-actors-exploit-trusted-ai-platforms-to-deliver-malware?utm_source=mastodon&utm_medium=social