Ankura CTIX FLASH Update – May 11, 2026

Malware Activity

How Attackers Are Turning Trusted Platforms into Weapons

Recent cyber campaigns show how attackers are increasingly exploiting trust in well‑known brands and platforms to carry out effective attacks. In one case, criminals set up a fake Claude AI website that looks legitimate and tricks Windows users into downloading malware hidden inside a supposed “Claude‑Pro Relay” tool, giving attackers remote control over infected systems. In another campaign, hackers abuse Google’s paid search ads to impersonate GoDaddy’s ManageWP login, leading victims to a nearly identical sign‑in page that steals usernames, passwords, and even two‑factor codes in real time. Both attacks rely on appearing authentic, using trusted names, professional design, and top search results, to lower suspicion and increase success. Once access is gained, the impact can be severe, ranging from full system control to takeover of hundreds of connected WordPress sites. Together, these incidents highlight