Fake Claude and ChatGPT campaigns use ClickFix tactics against developers

# Fake Claude and ChatGPT campaigns use ClickFix tactics against developers

https://gcdradar.vercel.app/incidents/fake-claude-and-chatgpt-campaigns-use-clickfix-tactics-again · AIR-2026-0336 · closed 2026-10-30

- Lane: Breaches & attacks
- Severity: 3 (Confirmed exploitation)
- Fix status: No fix needed
- First reported: 2026-10-16
- AI role: AI-enabled attack
- Products: ChatGPT, Claude

## Summary

Threat actors are leveraging impersonation campaigns of popular AI developer brands to target enterprise employees. These attacks typically employ ClickFix social engineering lures to compromise systems.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-10-16: Fake Claude, ChatGPT Attacks Surge, Putting Developers at Risk (https://darkreading.com/application-security/fake-claude-chatgpt-attacks-developers-risk)

## Sources

- 2026-10-16 Dark Reading: Fake Claude, ChatGPT Attacks Surge, Putting Developers at Risk https://darkreading.com/application-security/fake-claude-chatgpt-attacks-developers-risk

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.