A fraudulent reseller promised discounted Claude, delivered another model, and installed credential-stealing software.
Source: AnthropicA shop advertises a discounted branded product, but delivers a different product with something harmful hidden inside.
Source: AnthropicA fraudulent reseller promised discounted Claude, delivered another model, and installed credential-stealing software.
Source: AnthropicDemand for AI services creates opportunities for impersonation. This case concerns a deceptive AI offering; it does not establish that AI autonomously ran the attack.
Source: AnthropicA shop advertises a discounted branded product, but delivers a different product with something harmful hidden inside.
An analogy for the mechanism; not an additional claim about the incident.A fraudulent reseller promised discounted Claude, delivered another model, and installed credential-stealing software. Anthropic
AI assistance to the attacker is not established for this case.
AI was the advertised product and lure. The source does not establish autonomous AI execution of this attack.
The report covers December 2025–August 2026 overall. That window is not the start and end date of this individual case.
Demand for AI services creates opportunities for impersonation. This case concerns a deceptive AI offering; it does not establish that AI autonomously ran the attack.
Anthropic reports disrupting abusive accounts. An account ban does not establish that the broader operation has ended. Anthropic
Here AI was the advertised product and lure: the reported reseller delivered a different model and credential-stealing software.
Provide approved AI services through verified channels, and review unfamiliar tools before employees install them or connect work accounts.
An approved-tools list alone cannot stop a harmful download; installation and account controls must cover the devices people use.
Investigate unexpected software and account activity, remove the harmful software, and revoke exposed passwords, keys, and active sessions as appropriate.
Changing a password alone may leave active sessions or installed malware in place. The affected access must be identified.
Editorial connections to relevant controls, not evidence that a particular technology would have prevented this case. Each guide links to the security guidance behind its recommendations.
Explore the full AI security frameworkExplore more original accounts in the source report library ↗.
These are source-reported findings. An independent assessment, when available, is labeled explicitly.
01Reviewed Sep 10, 2026 · Editorial methodology · Structured data