Fake Claude and ChatGPT campaigns use ClickFix tactics against developers

Security researchers report a surge in phishing-style campaigns impersonating Claude and ChatGPT brands, using ClickFix-like social engineering tactics to target enterprise developers and employees.

Disclosed 16 October 2026 · Record updated 16 October 2026

Impact

Enterprise developers and employees are being targeted by campaigns impersonating trusted AI brands to trick them into running malicious commands or downloads.

Our coverage

Incidents

Fake Claude and ChatGPT lures are targeting developers

Dark Reading reports a rise in campaigns impersonating popular AI brands and using ClickFix-style social engineering against enterprise staff.

16 Oct 2026

Sources

darkreading.comhttps://darkreading.com/application-security/fake-claude-chatgpt-attacks-developers-risk