FAKE CLAUDE, CHATGPT ATTACKS SURGE, PUTTING DEVELOPERS AT RISK

Summary from the TLDR InfoSec newsletter

Any.Run analyzed 1,258 incidents over six months involving fake AI-tool lures. Attackers impersonated Claude in 60% of cases and ChatGPT or Codex in 33%, using malicious ads, SEO poisoning, fake download pages, shared chats, and artifacts. ClickFix-style commands appeared in 45% of cases. Targets risk losing source code, SSH keys, CI/CD tokens, cloud and AI API keys, sessions, and billing access.