Executive summary
- Financially motivated eCrime actors will likely continue to expand opportunistic campaigns by impersonating AI platforms. These campaigns generate direct supply chain risk for enterprises, as threat actors target software developer tooling, including AI coding assistants and package managers, to compromise developer workstations.
- In early March 2026, EclecticIQ analysts ident...
This report highlights a sophisticated cybercriminal campaign leveraging the hype around AI tools to compromise developer workstations. The attackers exploit trust in routine software installation processes, using SEO poisoning to direct victims to convincing fake pages. The malware’s fileless execution and evasion of Windows defenses demonstrate a high level of technical sophistication, while the targeting of collaboration tools and cloud storage underscores the focus on enterprise environments...