Fake AI Tools Put US Companies at Risk: Inside Counterfeit Claude, ChatGPT, and Copilot

ANY.RUN tracked 1,258 sandbox analyses from April–October 2026 showing sustained campaigns that impersonate AI brands (Claude, ChatGPT, Copilot, etc.) to trick employees into pasting install commands, running trojanized installers, or entering credentials; outcomes included infostealer/RAT deployment, browser-session theft enabling account takeover, and business-account compromise, with extensive IOCs and recommended detection/mitigation measures.