Topic

Malicious copy and paste

Social engineering that gets a visitor to copy a prepared command from a web page and run it in a terminal or run dialog, so the user supplies the execution the attacker cannot.

Current clusters

build1 publisher

Three malware campaigns stage their lure pages on Claude and ChatGPT share links

Huntress and BleepingComputer describe sponsored ads that land on a real Claude Artifact page. The download link and the pasted curl command both reach elsewhere, so the trusted hostname never serves the payload.

Publishers:dev.to

Reality

Evidence45
Adoption35
Hype gap+15
Incentives55
Confidence45