Threat Actors Abuse claude.ai Shared Chat for ClickFix Malvertising Campaign

Cybercriminals have found a new vector to distribute malware: they're hijacking the legitimate chat-sharing features built into Anthropic's Claude AI platform to host malicious links that trick users into downloading banking trojans and other destructive software. The campaign, which security researchers are tracking as ClickFix, exploits a fundamental trust problem in the digital ecosystem—users are more likely to click links that appear to come from reputable AI companies—turning a convenience feature into a weapon against the very people trying to use AI safely. It's a stark reminder that no platform, no matter how well-intentioned, can entirely outpace the ingenuity of those seeking to weaponize it.

www.trendmicro.com·Jun 17