Back Blog.Knowbe4

Warning: Phishing Attacks Are Abusing the Kuse AI App

Blog.Knowbe4 •KnowBe4 Team • May 19, 2026

Attackers are abusing the storage and sharing features of Kuse, a free AI app, to assist in phishing campaigns, according to researchers at Trend Micro. Kuse is a legitimate agentic AI platform used by employees to streamline workflows. Users can files with coworkers, which generates a link hosted by Kuse’s domain. In this case, attackers are abusing the feature to generate legitimate-looking phishing links.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Phishing Campaign Exploits Kuse.ai for Credential Harvesting On April 9, 2026, Trend Micro reported a phishing campaign leveraging Kuse.ai, an AI workplace app, to host malicious Markdown documents. Attackers utilized a Vendor Email Compromise (VEC) to send crafted emails that redirected users to a fake Microsoft login page. The phishing links appeared legitimate due to Kuse.ai's domain, which reduced suspicion among recipients. The campaign's tactics included using a blurred document preview and the uncommon .md file extension to evade detection. This incident highlights the risk of reputable platforms being exploited for phishing. Trend Micro's report did not include a statement from Kuse.ai regarding the incident. The attack primarily targets corporate users who may trust communications from known vendors. 2 sources 59

Extracted Entities

Warning: Phishing Attacks Are Abusing the Kuse AI App

The full story

Extracted Entities

Attack Types (1)

MITRE ATT&CK (1)

Tools (1)