{"rewrite":{"id":"r_f07f4dc0a3624d27dc592777","clusterId":"c_0a13af8a9109e8fbdb7aa534","slug":"attackers-exploit-chatgpt-and-claude-share-links-to-spread-malware","model":"deepseek-v4-flash","headline":"Attackers Exploit ChatGPT and Claude Share Links to Spread Malware","summary":"ESET's May 2026 malware report details a new campaign called LLMShare that uses legitimate share links from ChatGPT and Claude to distribute malware. The report also notes an overall increase in domestic detections, with ransomware up and DOC/Fraud as the most common threat.","whyItMatters":"Attackers are weaponizing a trusted feature of widely used generative AI services, making the infection vector harder for users to recognize as malicious.","webCardHtml":"\u003cp\u003eESET\u0026#39;s May 2026 malware report for Japan identifies a new attack campaign named LLMShare that exploits the share link feature of ChatGPT and Claude. Attackers create share links to conversation content or generated results, then distribute those URLs to victims. Because the links come from legitimate generative AI services, users may trust them and click through, leading to malware infection. The report also shows an overall rise in domestic malware detections compared to April, with ransomware detections increasing and DOC/Fraud-a document file containing a link to a fraudulent site-being the single most detected threat. Malware targeting Android and iOS increased, while Linux and OS X threats declined.\u003c/p\u003e","blueskyPost":"ESET's LLMShare campaign exploits the trust users place in ChatGPT and Claude share links. The attack vector is the platform's own feature, not a bug.","twitterPost":"LLMShare weaponizes ChatGPT and Claude share links. The feature users trust for collaboration is now an infection vector.","threadsPost":"ESET's LLMShare campaign shows attackers using ChatGPT and Claude share links, not malware-laden attachments. The platform's own collaboration feature becomes the delivery method. Trust in the link is the vulnerability.","newsletterBlurb":"ESET's May 2026 malware report for Japan reveals a new campaign called LLMShare that exploits the share link feature of ChatGPT and Claude to distribute malware. Overall detections rose, with ransomware up and DOC/Fraud as the most common threat.","attributionJson":"[{\"source\":\"ASCII.jp\",\"url\":\"https://ascii.jp/elem/000/004/414/4414306/?rss\",\"title\":\"Exploiting ChatGPT and Claude's Share Features: What Is the New 'LLMShare' Method That Leads to Malware Infection?\"}]","lintFlagsJson":null,"lintHits":0,"costUsd":0,"inputTokens":4263,"outputTokens":507,"status":"published","repairAttempts":0,"nextRepairAt":null,"factsAttemptedAt":1782787254,"createdAt":"2026-06-30T02:36:23.000Z","publishedAt":"2026-06-30T02:39:50.000Z","updatedAt":"2026-06-30T02:39:50.000Z"},"cluster":{"id":"c_0a13af8a9109e8fbdb7aa534","canonicalTitle":"ChatGPT・Claudeの共有機能を悪用　マルウェア感染に誘導する新手口「LLMShare」とは","representativeArticleId":"a_3386c58f2a186241b1a02635","sourceCount":1,"writtenSourceCount":1,"writeAttempts":0,"isSolo":true,"entitiesJson":"{\"anime_titles\":[],\"manga_titles\":[],\"work_titles\":[],\"studios\":[],\"people\":[],\"type\":\"news\",\"domain\":\"other\",\"is_roundup\":false}","contentType":"news","status":"published","firstSeenAt":"2026-06-30T02:00:00.000Z","lastSeenAt":"2026-06-30T02:00:00.000Z","updatedAt":"2026-06-30T02:39:50.000Z"},"attribution":[{"source":"ASCII.jp","url":"https://ascii.jp/elem/000/004/414/4414306/?rss","title":"ChatGPT・Claudeの共有機能を悪用　マルウェア感染に誘導する新手口「LLMShare」とは"}],"entities":{"anime_titles":[],"manga_titles":[],"work_titles":[],"studios":[],"people":[],"type":"news","domain":"other","is_roundup":false},"keyFacts":["ESET's May 2026 malware report for Japan identifies a new attack campaign called LLMShare that uses legitimate share links from ChatGPT and Claude to distribute malware.","The report shows an overall rise in domestic malware detections in Japan compared to April, with ransomware detections increasing.","DOC/Fraud, a document file containing a link to a fraudulent site, is the single most detected threat in Japan according to the report.","Malware targeting Android and iOS increased in Japan, while Linux and OS X threats declined."]}