🚨 Kaspersky Warns: APT Groups Target APAC via Fake Claude AI Apps

Kaspersky GReAT reports that SilverFox—a highly active Advanced Persistent Threat (APT) group—is targeting organisations in the APAC region by distributing fake Claude AI applications for Windows, macOS, and Linux. • Attack Mechanics & Campaign Trends • Uses phishing emails (e.g., fake tax violation notices) and malicious files on messaging apps to deploy cyberespionage malware. • Over 1,600 malicious phishing emails recorded between January and February 2026. • Employs agentic AI (e.g., JADEPUFFER ransomware executing attack cycles in 31 seconds) and indirect prompt injection techniques like ChatGPhish. • Regional Breakdown • Greater China: Main target, accounting for >90% of attacks (Mainland China at 71%). • Emerging Hotspots: Myanmar, Cambodia, and Singapore see rising threat levels. • Sector Disruption • Manufacturing: Hardest hit, comprising over 33% of total attacks. • Tech & Services: Frequently targeted via phishing aimed at ICT/BPM and tech personnel. • Healthcare & Finance: High-value targets facing critical operational risks. • Key Defense Recommendations • Shift to proactive AI threat hunting, Zero Trust architecture, and systematic endpoint coverage.