Security/press release/2026-10-23

Hackers Impersonate AI Services and Abuse Official Domains to Distribute Malware and Steal Credentials

Security researchers, including Check Point Research and Cequence Security, have identified ongoing campaigns where hackers impersonate popular AI services like ChatGPT and Claude. These malicious actors are distributing malware through various methods, including creating fake download pages on legitimate-looking domains, abusing content-sharing features, and leveraging Google Ads. The primary objective of these attacks is to steal user login credentials for AI platforms, banking information, and cryptocurrency. While specific malware names and attack vectors vary across reports, the core finding of widespread credential theft via AI impersonation is consistently reported by multiple security firms and news outlets.

7 articles from 6 outlets covered this story. No difference in framing or figures was found between them. The underlying claim is sourced from a press release.

What do all outlets agree on?

6 outlets covered “Hackers Impersonate AI Services and Abuse Official Domains to Distribute Malware and…”. All of them report the following:

  • Hackers impersonate AI services (ChatGPT, Claude)
  • Malware is distributed to steal credentials and cryptocurrency
  • Attack vectors include fake download pages and abuse of legitimate features
  • Check Point Research and Cequence Security reported on these campaigns

Did outlets disagree about this?

No. All 6 outlets covering “Hackers Impersonate AI Services and Abuse Official Domains to Distribute Malware and…” reported it the same way — no difference in framing or figures was found between them.

Which outlets covered this?

All 7 articles found on this story, grouped by the stance of the piece. Every link goes to the original publisher.

What related stories are there?

Which companies does this involve?

Get the week in AI in one email

What happened, which outlets reported it, and where their coverage differed. One issue a week.

The first issue hasn’t gone out yet. Subscribe and it’s the one you’ll get.

We’ll send the digest and nothing else. One-click unsubscribe. Privacy.