Mmastodon TechnologyCybersecurity first seen 20 h ago, last 20 h ago, peak #9
Fake AI tool scams hide on trusted platforms like GitHub
Original: The scary part of fake-AI-tool scams isn't the domain — it's the domain you already trust. Any.Run traced 1,258 sandbox
Malware analysis firm Any.Run traced 1,258 sandbox submissions of fake AI tool scams and found the lures were hosted not on shady domains but on trusted services: GitHub, GitLab Pages, Cloudflare Pages, Google Sites and shared AI chat conversations. Claude was impersonated in 60% of cases, and 45% of the incidents ended with malware being delivered. Security commentators say the reliance on legitimate hosting makes these scams far harder for users to spot.
Why now: New research shows AI-themed scams increasingly abuse trusted mainstream platforms rather than suspicious domains, catching users off guard.
Any.RunGitHubGitLabCloudflareGoogle Sites
Evidence
- The scary part of fake-AI-tool scams isn't the domain — it's the domain you already trust. Any.Run traced 1,258 sandbox submissions: lures sat on GitHub, GitLab Pages, Cloudflare Pages, Google Sites and inside shared AI chats. Claude was impersonated in 60%. 45% ended with a… · Ciberjohn@universeodon.com · 2
API: https://socialmediatrends-api.osmike.com/v1/trends/3612488