ChatGPT and Claude links are now a hacker's best friend
attackers are hijacking shared chatgpt and claude links to spread malware, bypassing traditional email security by abusing trusted domains to push malicious downloads.
attackers are abusing public sharing features in chatgpt and claude to distribute malware, leveraging the trusted reputation of these domains to bypass security filters. security firm push security documented the 'llmshare' technique, noting that threat actors buy paid search ads to lure victims to malicious shared chats containing fake outage notices or apple support walkthroughs. one advanced method exploits chatgpt's code-rendering feature to display convincing fake error pages that prompt users to install infected desktop applications. because the content is hosted on legitimate ai domains, standard url scanners and email security tools fail to flag the threats.