TLDR
Threat actors are exploiting the AI hype wave by impersonating popular platforms like ChatGPT, Claude, DeepSeek, and Microsoft Copilot in phishing emails, malvertising, and fake GitHub installers. A recent campaign sent 100,000+ ChatGPT...
How it works
Threat actors are exploiting the AI hype wave by impersonating popular platforms like ChatGPT, Claude, DeepSeek, and Microsoft Copilot in phishing emails, malvertising, and fake GitHub installers. A recent campaign sent 100,000+ ChatGPT...
Red flags
- : Urgent emails demanding payment or account updates within days, branded with AI logos "Free AI tools" or plugins advertised via search engines and social ads GitHub repos or download links offering AI installers from unverified publishers
What to do
- 1: Verify subscription/billing notices directly in the official AI platform, never via email links Avoid downloading AI plugins, models, or tools from ads and unofficial repositories Enable MFA on all AI service accounts and monitor statements for unauthorized charges
Source
microsoft-security
Source reviewed by Mythos Forensic Team
https://www.microsoft.com/en-us/security/blog/2026/06/08/ai-brands-as-bait-how-threat-actors-are-using-the-ai-hype-in-social-engineering/FAQ
Is AI Brand Phishing: How ChatGPT, Claude, and DeepSeek Lures Steal Credentials and Cards a real scam pattern?
Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.
What are the first warning signs?
: Urgent emails demanding payment or account updates within days, branded with AI logos "Free AI tools" or plugins advertised via search engines and social ads GitHub repos or download links offering AI installers from unverified publishers
What should I do first?
: Verify subscription/billing notices directly in the official AI platform, never via email links Avoid downloading AI plugins, models, or tools from ads and unofficial repositories Enable MFA on all AI service accounts and monitor statements for unauthorized charges
Can LegalAudit check my case?
Yes. Start a free chat and paste the message, link, sender, or payment details for triage.