Fake AI Tools Use Malicious Installers, Command-Pasting Lures, and Fake Sign-Ins to Target Businesses

Article Details

Attack Vectors

• Fake AI download pages and install documentation lure users into pasting attacker-supplied commands into PowerShell, Terminal, or the Windows Run dialog.
• ClickFix pages instruct users to run commands that invoke mshta.exe and encoded PowerShell to retrieve and execute later stages.
• Trojanized installers pose as AI software; one observed chain installs a genuine Claude installer as a decoy while a scheduled task launches headless Edge to collect browser cookies, extension data, and keystrokes.
• Shared AI chats, custom GPTs, and artifacts direct users to attacker-controlled domains or command-based payload delivery.
• Fake advertising invitations use browser-in-the-browser windows that imitate Google sign-in to phish business credentials.
• Fake AI-named files were reported carrying Aura Stealer, AsyncRAT, and Quasar RAT.

Defensive Notes

• Publish an approved AI software catalog with official download sources and distribute software through managed installation channels.
• Restrict mshta.exe, wscript.exe, and unsigned PowerShell for standard users using controls such as AppLocker, WDAC, and attack surface reduction rules.
• Train users to verify installation commands against vendors’ official documentation rather than copying them from search results, advertisements, shared chats, or unfamiliar pages.
• Hunt for behavioral indicators such as pasted-command execution, recurring staging paths and backend APIs, scheduled tasks, and headless browsers with remote debugging enabled.
• Use behavioral analysis and current threat intelligence to investigate suspicious files, URLs, and activity as lure domains rotate.