- Published
- Source
- Dark Reading
- Filed under
- AI attacks, Attacks
Campaigns that impersonate popular AI brands are on the rise, and they typically use ClickFix-like tactics to target unsuspecting enterprise employees.
Using AI safely
- Know which AI tools your organisation uses, and what data goes into them.
- Treat AI agents like any other identity: least privilege, logging and a named owner.
- Test AI features for prompt injection and data leakage before customers reach them.
More helpNCSC: guidelines for secure AI system development (opens in a new tab)
Defender’s notebook
The attacker technique behind this story, in MITRE’s terms – and what to check in your own estate.
User Execution
ExecutionWhat a defender checks
- Block programs running from user-writable folders with application control or ASR rules.
- Warn staff about fake CAPTCHA and "paste this command" tricks.
- Hunt for PowerShell or mshta started from the Run dialog.
Build the skillBlue Team Analyst · Endpoint Monitoring
Impersonation
StealthWhat a defender checks
- Confirm any change of payment details on a number you already hold – never the one in the message.
- Make the help desk verify identity before resetting passwords or MFA.
- Brief finance and help-desk staff on the current pretexts.
Build the skillBlue Team Analyst · Email & Phishing Investigation
© 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation. MITRE ATT&CK and ATT&CK are registered trademarks of The MITRE Corporation.
MyCyberWay training
AI security · in both programmes
AI is part of the attack surface now. Learn to watch it.
Blue Team Analyst covers Security Copilot in triage and monitoring the AI itself: inherited permissions, prompt injection and Purview DSPM for AI. Blue Team Engineer secures the deployment: Copilot pre-flight hardening, agent identity and tool allow-lists.
- Security Copilot in triage
- Prompt injection and DSPM for AI
- Agent identity and allow-lists
Headlines and short summaries only, except where a public body publishes under an open licence. Every story links to its publisher, who owns it. MyCyberWay does not edit or endorse third-party reporting.
