Fake AI Attacks Target US Businesses Amid Rising Cyber Threats

• •Fake AI campaigns have targeted 16% of US businesses since April 2026.
• •Attackers impersonate popular AI brands to distribute malware and steal credentials.
• •MSSPs face operational challenges due to repetitive investigations and varied customer environments.

Cyber attackers are impersonating popular AI products to spread malware and compromise business accounts across the US. Between April and October 2026, ANY.RUN linked 1,258 analyses to these fake AI campaigns, which have targeted 16% of US businesses. Attackers use familiar AI brands like Claude and ChatGPT to lure employees into executing malicious commands or submitting credentials on fraudulent pages. One such campaign involved a fake Claude download site that executed a PowerShell command to install malware. The operational pressure on Managed Security Service Providers (MSSPs) is increasing due to the repetitive nature of these incidents, complicating detection and response efforts. The attacks leverage legitimate Windows utilities, making detection challenging as the malicious payload is hidden within multiple execution stages. The situation requires MSSPs to enhance their monitoring and detection capabilities to manage the evolving threat landscape effectively.