Inside the 2026 Phishing Wave: How Attackers Weaponized ChatGPT, Claude, DeepSeek, and Copilot Brands
Microsoft Threat Intelligence has identified four major phishing and malware campaigns between March and May 2026 that weaponize the trust in AI brands like ChatGPT and DeepSeek to steal credentials and financial data... The most technically sophisticated attack created a fraudulent DeepSeek V4 GitHub repository tha...
Published byEdited with DeepSeek-V4-ProImages generated with GPT Image 1.5
Microsoft Threat Intelligence has identified four major phishing and malware campaigns between March and May 2026 that weaponize the trust in AI brands like ChatGPT and DeepSeek to steal credentials and financial data...
The most technically sophisticated attack created a fraudulent DeepSeek V4 GitHub repository that ranked first on Bing within four days, distributing a loader that installed Vidar infostealer to steal credentials and...
Another campaign, attributed to the initial access broker Storm 3075, targeted over 66,000 devices in a single day with malicious ads, using code signing certificates obtained from a service called Fox Tempest to make...
What specific phishing and malware campaigns have been impersonating AI platforms like ChatGPT, Claude, DeepSeek, and Microsoft Copilot, asMicrosoft Threat Intelligence has documented a surge in campaigns exploiting the branding of major AI platforms to commit fraud. Image: AI-generated representation of the threat.
AI Prompt
Create a landscape editorial hero image for this Studio Global article: What specific phishing and malware campaigns have been impersonating AI platforms like ChatGPT, Claude, DeepSeek, and Microsoft Copilot, as. Article summary: On June 8, 2026, Microsoft Threat Intelligence published a report documenting four distinct campaigns between March and May 2026 that impersonate ChatGPT, Microsoft Copilot, Anthropic's Claude, and DeepSeek to steal cred. Topic tags: general, general web, user generated. Reference image context from search candidates: Reference image 1: visual subject "# AI Brand Fraud: How Threat Actors Turned ChatGPT, Claude and DeepSeek Into Phishing Bait. Microsoft Threat Intelligence documented phishing campaigns using ChatGPT, Claude and De" source context "AI Brand Fraud: How Threat Actors Turned ChatGPT, Claude and DeepSeek Into Phishing Bait" Reference image 2: visual s
openai.com
On June 8, 2026, Microsoft Threat Intelligence published a detailed report exposing how threat actors have co-opted the branding of major AI platforms into a new generation of social engineering attacks. The campaigns, active between March and May 2026, impersonate ChatGPT, Microsoft Copilot, Anthropic's Claude, and DeepSeek to distribute malware, steal credentials, and commit financial fraud . Crucially, these attacks do not exploit any vulnerability in the AI models themselves. Instead, they are pure deception operations that exploit user excitement and trust in AI tools to bypass suspicion .
Studio Global AI
Continue your research
This page includes a source-backed answer you can continue inside Studio Global.
What is the short answer to "Inside the 2026 Phishing Wave: How Attackers Weaponized ChatGPT, Claude, DeepSeek, and Copilot Brands"?
Microsoft Threat Intelligence has identified four major phishing and malware campaigns between March and May 2026 that weaponize the trust in AI brands like ChatGPT and DeepSeek to steal credentials and financial data...
What are the key points to validate first?
Microsoft Threat Intelligence has identified four major phishing and malware campaigns between March and May 2026 that weaponize the trust in AI brands like ChatGPT and DeepSeek to steal credentials and financial data... The most technically sophisticated attack created a fraudulent DeepSeek V4 GitHub repository that ranked first on Bing within four days, distributing a loader that installed Vidar infostealer to steal credentials and...
What should I do next in practice?
Another campaign, attributed to the initial access broker Storm 3075, targeted over 66,000 devices in a single day with malicious ads, using code signing certificates obtained from a service called Fox Tempest to make...
Inside the 2026 Phishing Wave: How Attackers Weaponized ChatGPT, Claude, DeepSeek, and Copilot Brands
Microsoft Threat Intelligence has identified four major phishing and malware campaigns between March and May 2026 that weaponize the trust in AI brands like ChatGPT and DeepSeek to steal credentials and financial data... The most technically sophisticated attack created a fraudulent DeepSeek V4 GitHub repository tha...
Published byEdited with DeepSeek-V4-ProImages generated with GPT Image 1.5
Microsoft Threat Intelligence has identified four major phishing and malware campaigns between March and May 2026 that weaponize the trust in AI brands like ChatGPT and DeepSeek to steal credentials and financial data...
The most technically sophisticated attack created a fraudulent DeepSeek V4 GitHub repository that ranked first on Bing within four days, distributing a loader that installed Vidar infostealer to steal credentials and...
Another campaign, attributed to the initial access broker Storm 3075, targeted over 66,000 devices in a single day with malicious ads, using code signing certificates obtained from a service called Fox Tempest to make...
What specific phishing and malware campaigns have been impersonating AI platforms like ChatGPT, Claude, DeepSeek, and Microsoft Copilot, asMicrosoft Threat Intelligence has documented a surge in campaigns exploiting the branding of major AI platforms to commit fraud. Image: AI-generated representation of the threat.
AI Prompt
Create a landscape editorial hero image for this Studio Global article: What specific phishing and malware campaigns have been impersonating AI platforms like ChatGPT, Claude, DeepSeek, and Microsoft Copilot, as. Article summary: On June 8, 2026, Microsoft Threat Intelligence published a report documenting four distinct campaigns between March and May 2026 that impersonate ChatGPT, Microsoft Copilot, Anthropic's Claude, and DeepSeek to steal cred. Topic tags: general, general web, user generated. Reference image context from search candidates: Reference image 1: visual subject "# AI Brand Fraud: How Threat Actors Turned ChatGPT, Claude and DeepSeek Into Phishing Bait. Microsoft Threat Intelligence documented phishing campaigns using ChatGPT, Claude and De" source context "AI Brand Fraud: How Threat Actors Turned ChatGPT, Claude and DeepSeek Into Phishing Bait" Reference image 2: visual s
openai.com
On June 8, 2026, Microsoft Threat Intelligence published a detailed report exposing how threat actors have co-opted the branding of major AI platforms into a new generation of social engineering attacks. The campaigns, active between March and May 2026, impersonate ChatGPT, Microsoft Copilot, Anthropic's Claude, and DeepSeek to distribute malware, steal credentials, and commit financial fraud . Crucially, these attacks do not exploit any vulnerability in the AI models themselves. Instead, they are pure deception operations that exploit user excitement and trust in AI tools to bypass suspicion .
Studio Global AI
Continue your research
This page includes a source-backed answer you can continue inside Studio Global.
What is the short answer to "Inside the 2026 Phishing Wave: How Attackers Weaponized ChatGPT, Claude, DeepSeek, and Copilot Brands"?
Microsoft Threat Intelligence has identified four major phishing and malware campaigns between March and May 2026 that weaponize the trust in AI brands like ChatGPT and DeepSeek to steal credentials and financial data...
What are the key points to validate first?
Microsoft Threat Intelligence has identified four major phishing and malware campaigns between March and May 2026 that weaponize the trust in AI brands like ChatGPT and DeepSeek to steal credentials and financial data... The most technically sophisticated attack created a fraudulent DeepSeek V4 GitHub repository that ranked first on Bing within four days, distributing a loader that installed Vidar infostealer to steal credentials and...
What should I do next in practice?
Another campaign, attributed to the initial access broker Storm 3075, targeted over 66,000 devices in a single day with malicious ads, using code signing certificates obtained from a service called Fox Tempest to make...
Attackers launched a phishing campaign centered on a fake ChatGPT Plus subscription renewal notice, threatening account downgrade unless payment information was updated within seven days .
Scale and targets: An initial wave sent 4,500 emails to victims in South Africa. A larger, parallel campaign used the same infrastructure to send up to 100,000 emails in a single day to targets in Switzerland, Austria, and South Africa, focusing on organizations in higher education and professional services .
Technique: The attack used a multi-stage redirection chain. Victims clicking the “update payment” link were routed through a legitimate CRM platform, an Amazon tracking domain, and a URL shortener before landing on a compromised e-commerce site that harvested personal information and full credit card details across multiple sequential pages .
This sophisticated credential-theft campaign impersonated Anthropic to bypass multi-factor authentication (MFA) .
Scale and targets: The attack targeted over 2,000 organizations, with 62% of victims in the United States, 18% in the United Kingdom, and 9% in India. Financial services companies made up 8% of the targets .
Technique: Victims received an email claiming a violation of acceptable use policies, with a PDF attachment named "Fill and Sign Claude Appeal Form.pdf" (SHA-256: 791efb...d40e) . The PDF led users through a Cloudflare verification prompt and a fake Claude-branded landing page to a counterfeit Microsoft sign-in page designed to intercept session tokens—a classic AiTM technique that circumvents MFA .
This campaign demonstrated the speed at which threat actors can exploit AI hype to target a technical audience .
Speed and scale: Within 45 minutes of DeepSeek previewing its V4 model, attackers created a fraudulent GitHub organization named "DeepSeek-V4," complete with authentic-looking stolen branding and accurate benchmark data . The repository accumulated 91 stars and ranked first on Bing for searches like "DeepSeek v4 weights github" within four days .
Payload: The repository's hosted archives contained a loader that installed the Vidar infostealer, a tool designed to steal credentials, browser cookies, and cryptocurrency wallet data . Microsoft found the same loader hash was reused in files impersonating other trending AI tools including GPT-5.5, Claude Code, and Manus AI, showing a swappable-lure strategy .
4. Storm-3075 Malvertising Campaign With Fraudulent Code-Signing (March–May 2026)
Attributed to an initial access broker tracked as Storm-3075, this campaign used malicious advertisements to deploy signed malware on a massive scale .
Scale and targets: On March 13, 2026, a single campaign run targeted over 66,000 devices via malicious popups on free movie streaming sites, promoting fake products like "Awesome AI Windows Plugin" and "Flux Pro AI" .
Technique: The malware was distributed with a valid digital signature fraudulently obtained from Fox Tempest, a malware-signing-as-a-service operation. This made the executable appear legitimate to the operating system, bypassing standard trust checks . On May 19, 2026, Microsoft unsealed a legal case against Fox Tempest in the US District Court for the Southern District of New York, seizing its website and disabling hundreds of virtual machines running the service .
The Broader Ecosystem of AI-Themed Fraud
These four campaigns are not isolated incidents. They form part of a broader, adaptive ecosystem of AI-themed fraud that relies on a toolkit of sophisticated and reusable techniques:
Multi-stage redirection: Attackers frequently route victims through legitimate services like CRMs, URL shorteners, and cloud platforms to evade automated detection before the final malicious payload is delivered .
SEO poisoning and fake repositories: The DeepSeek campaign highlights a dangerous evolution in supply-chain attacks. Fraudulent GitHub repositories and pages are search-engine optimized to outrank legitimate sources, specifically targeting developers and researchers looking for model weights and code .
Malware-signing-as-a-service: The legal action against Fox Tempest exposes a professionalized criminal infrastructure that provides fraudulently issued code-signing certificates to multiple actors, allowing unsigned malware to gain OS-level trust .
Swappable lures: The reuse of a single loader binary, repackaged under the names of different AI models like GPT-5.5, Claude Code, Kimi, and Manus AI, shows attackers can instantly adapt their campaigns to whichever tool is generating the most public interest at any moment .
Why This Shift Matters
Microsoft assesses that AI-themed lures "reflect a shift in social engineering that is likely to persist as a long-term tactic used by threat actors, from cybercriminal groups to nation states" . This does not replace traditional phishing lures like fake invoices or delivery notifications. Rather, it creates a powerful new attack surface built on the enormous public trust and curiosity AI platforms have generated, a risk that many organizations' security awareness training has not yet fully addressed . The targeting of developers through the DeepSeek campaign is particularly concerning, as it points to a supply-chain risk that sits upstream of countless enterprise applications and internal tools built on these models .
Attackers launched a phishing campaign centered on a fake ChatGPT Plus subscription renewal notice, threatening account downgrade unless payment information was updated within seven days .
Scale and targets: An initial wave sent 4,500 emails to victims in South Africa. A larger, parallel campaign used the same infrastructure to send up to 100,000 emails in a single day to targets in Switzerland, Austria, and South Africa, focusing on organizations in higher education and professional services .
Technique: The attack used a multi-stage redirection chain. Victims clicking the “update payment” link were routed through a legitimate CRM platform, an Amazon tracking domain, and a URL shortener before landing on a compromised e-commerce site that harvested personal information and full credit card details across multiple sequential pages .
This sophisticated credential-theft campaign impersonated Anthropic to bypass multi-factor authentication (MFA) .
Scale and targets: The attack targeted over 2,000 organizations, with 62% of victims in the United States, 18% in the United Kingdom, and 9% in India. Financial services companies made up 8% of the targets .
Technique: Victims received an email claiming a violation of acceptable use policies, with a PDF attachment named "Fill and Sign Claude Appeal Form.pdf" (SHA-256: 791efb...d40e) . The PDF led users through a Cloudflare verification prompt and a fake Claude-branded landing page to a counterfeit Microsoft sign-in page designed to intercept session tokens—a classic AiTM technique that circumvents MFA .
This campaign demonstrated the speed at which threat actors can exploit AI hype to target a technical audience .
Speed and scale: Within 45 minutes of DeepSeek previewing its V4 model, attackers created a fraudulent GitHub organization named "DeepSeek-V4," complete with authentic-looking stolen branding and accurate benchmark data . The repository accumulated 91 stars and ranked first on Bing for searches like "DeepSeek v4 weights github" within four days .
Payload: The repository's hosted archives contained a loader that installed the Vidar infostealer, a tool designed to steal credentials, browser cookies, and cryptocurrency wallet data . Microsoft found the same loader hash was reused in files impersonating other trending AI tools including GPT-5.5, Claude Code, and Manus AI, showing a swappable-lure strategy .
4. Storm-3075 Malvertising Campaign With Fraudulent Code-Signing (March–May 2026)
Attributed to an initial access broker tracked as Storm-3075, this campaign used malicious advertisements to deploy signed malware on a massive scale .
Scale and targets: On March 13, 2026, a single campaign run targeted over 66,000 devices via malicious popups on free movie streaming sites, promoting fake products like "Awesome AI Windows Plugin" and "Flux Pro AI" .
Technique: The malware was distributed with a valid digital signature fraudulently obtained from Fox Tempest, a malware-signing-as-a-service operation. This made the executable appear legitimate to the operating system, bypassing standard trust checks . On May 19, 2026, Microsoft unsealed a legal case against Fox Tempest in the US District Court for the Southern District of New York, seizing its website and disabling hundreds of virtual machines running the service .
The Broader Ecosystem of AI-Themed Fraud
These four campaigns are not isolated incidents. They form part of a broader, adaptive ecosystem of AI-themed fraud that relies on a toolkit of sophisticated and reusable techniques:
Multi-stage redirection: Attackers frequently route victims through legitimate services like CRMs, URL shorteners, and cloud platforms to evade automated detection before the final malicious payload is delivered .
SEO poisoning and fake repositories: The DeepSeek campaign highlights a dangerous evolution in supply-chain attacks. Fraudulent GitHub repositories and pages are search-engine optimized to outrank legitimate sources, specifically targeting developers and researchers looking for model weights and code .
Malware-signing-as-a-service: The legal action against Fox Tempest exposes a professionalized criminal infrastructure that provides fraudulently issued code-signing certificates to multiple actors, allowing unsigned malware to gain OS-level trust .
Swappable lures: The reuse of a single loader binary, repackaged under the names of different AI models like GPT-5.5, Claude Code, Kimi, and Manus AI, shows attackers can instantly adapt their campaigns to whichever tool is generating the most public interest at any moment .
Why This Shift Matters
Microsoft assesses that AI-themed lures "reflect a shift in social engineering that is likely to persist as a long-term tactic used by threat actors, from cybercriminal groups to nation states" . This does not replace traditional phishing lures like fake invoices or delivery notifications. Rather, it creates a powerful new attack surface built on the enormous public trust and curiosity AI platforms have generated, a risk that many organizations' security awareness training has not yet fully addressed . The targeting of developers through the DeepSeek campaign is particularly concerning, as it points to a supply-chain risk that sits upstream of countless enterprise applications and internal tools built on these models .
thebrightminded.comAI Brand Fraud: How Threat Actors Turned ChatGPT, Claude and ...
microsoft.comAI brands as bait: How threat actors are using the AI hype in social engineering
cybersecuritynews.comThreat Actors Abuse ChatGPT, Claude, and DeepSeek Brands as Phishing Lures to Steal Credentials
gigazine.netCrimes exploiting the AI boom are surging; Microsoft analyzes methods used to steal authentication credentials using ChatGPT and Claude names.