A threat actor abused Anthropic’s Claude Artifacts feature to funnel users toward malware, Huntress researchers have disclosed. Employees at at least 29 organizations were compromised over two days in July, after searching for the Claude desktop app and clicking a sponsored Bing ad. The ad pointed to the genuine claude.ai domain, but landed on an attacker-published public artifact, which redirected them to a spoofed download site serving SectopRAT. What are Claude Artifacts? Artifacts are a … More
The post How attackers hosted a fake Claude download page on the claude.ai domain appeared first on Help Net Security.
source & further reading
helpnetsecurity.com — original article
GitHub revamps bug bounty program with new VIP tier, payout changes
Shadow AI is becoming enterprise security’s biggest blind spot
Product Showcase: AppViewX Agent Identity Security