Threat Intelligence

Fake Claude and ChatGPT Campaigns Are Targeting Employees and Developers

Dark Reading · 17 Oct 2026
Key Takeaway Tell staff to access AI tools only through official websites and app stores, and never to follow on-screen instructions that ask them to run commands or install software from an unverified source.

Dark Reading reports that campaigns impersonating popular AI brands, including Claude and ChatGPT, are on the rise. The attackers are aiming at unsuspecting employees in enterprise settings, with developers described as being at particular risk.

The campaigns typically use tactics similar to ClickFix. In general, this approach relies on persuading a person to take an action themselves, rather than exploiting a flaw in software. Because the lure borrows the credibility of well-known AI tools, staff who are keen to try or use those tools may be more willing to follow instructions without questioning them.

The feed summary does not provide further technical detail, so businesses should treat this as an early warning about a growing trend. Any small business whose staff use AI tools, or whose developers search for AI software and add-ons, could be exposed to this kind of impersonation.

ClickFix AI impersonation social engineering developers

Summarised by CISO AI from Dark Reading, written with Claude Sonnet 5.5. We link back to every original so you can read it yourself.