FakeAgent — Campaign Analysis & Threat Activity

Threat entity extracted from intelligence sources

Frequency
3
occurrences
First Seen
July 22, 2026
Last Seen
July 25, 2026

FakeAgent is a threat campaign tracked by ThreatCluster, appearing in 1 threat cluster built from 3 intelligence report mentions.

FakeAgent is a threat campaign tracked across 1 threat cluster and 3 intelligence report mentions on ThreatCluster. First observed July 22, 2026; most recent activity July 25, 2026.

Related Threat Clusters

Recent Intelligence Reports

  • Huntress reports — www.huntress.com · July 25, 2026
  • Fake Claude app promoted by Bing ads pushes SectopRAT malware — Bleepingcomputer · July 23, 2026
  • Inside FakeAgent: How a Claude Desktop Malvertising Campaign Hit 29 Organizations with ... — Huntress · July 22, 2026

Frequently asked questions

What is FakeAgent?

FakeAgent is a threat campaign tracked by ThreatCluster, appearing in 1 threat cluster built from 3 intelligence report mentions.

Is FakeAgent still active?

The most recent intelligence report mentioning FakeAgent on ThreatCluster is dated July 25, 2026. Activity was first observed July 22, 2026, giving a tracked span from then to July 25, 2026.

What is FakeAgent associated with?

Across ThreatCluster reporting, FakeAgent most frequently co-occurs with Data Breach, Malware, Phishing, Trojan, Operation Endgame, among 12 tracked related entities.

What are the latest developments involving FakeAgent?

The most significant recent cluster is “Malvertising Campaign Distributes SectopRAT via Fake Claude Desktop App” (7 articles · Updated July 23, 2026). FakeAgent appears across 1 threat cluster in total, listed above with sources.

How much reporting does ThreatCluster have on FakeAgent?

FakeAgent appears in 3 intelligence report mentions across 1 deduplicated threat cluster, aggregated from 17,000+ monitored sources.

CVSS v3.1 Breakdown