🕵️ FakeAgent

The items that name it 3

• Huntress Tragic Quadrant: Top Cyber Threats Wrecking Businesses
  article2026-10-01

  Used a malicious Claude Artifact hosted on the real claude.ai domain to target people looking for Claude Desktop, hitting 29 organizations in two days

• The AI Attack Surface: How Threat Actors Abuse Trusted AI Platforms
  writeup2026-08-27

  Claude Artifact malvertising campaign impersonating a Claude Desktop/Cowork download page, hit more than 29 organizations in July, redirected victims to downloading-api[.]it[.]com to deliver SectopRAT malware

• Inside FakeAgent: How a Claude Desktop Malvertising Campaign Hit 29 Organizations with SectopRAT
  writeup2026-07-22

  Name given by Huntress to this malvertising campaign, using Claude to host a malicious loader as a Claude Artifact and Claude Desktop itself as the masquerading application.