Attackers impersonate popular AI brands to spread malware

Sophos reviewed 12 months of MDR cases and found 38 incidents (30 involving software impersonation) where attackers used fake AI brand sites and extensions to deliver information stealers, backdoors, and loaders; common techniques included InstallFix fake installers, repackaged binaries, and malicious Chrome extensions with fake reviews, and researchers also observed instances of AI-assisted development of malware such as a Rust RAT communicating via Slack.