AI as bait in Q1 threat data: what should security teams watch?

TL;DR: AI is being used as bait and a delivery vehicle rather than as novel malware, with ChatGPT Stealer, InstallFix, and ClickFix-style social engineering driving measurable shifts in browser, endpoint, and credential risk, according to Expel’s Q1 2026 SOC data. The pattern reinforces that identity and access controls, not AI hype, remain the decisive control layer when attackers exploit trusted workflows.

NHIMG editorial — based on content published by Expel: the Q1 2026 quarterly threat report on AI and the threat landscape

By the numbers:

• Identity-related incidents remained dominant at 58.7% of Expel’s Q1 2026 attack surface mix.
• Teams-based phishing drove 74% of targeted endpoint attacks in the quarter.
• Browser extensions accounted for 12.7% of incidents in Q1, driven largely by ChatGPT Stealer activity.

Questions worth separating out

Q: How should security teams handle AI-branded malware that targets browser workflows?

A: Treat it as a trust and access problem, not only a malware problem.

Q: Why do browser-enabled AI agents increase credential exposure risk?

A: Because they often sit close to secrets, session data, and tool connectors while also being able to act on what they read.

Q: What breaks when install instructions can be cloned by attackers?

A: Traditional user awareness and documentation trust break down.

Practitioner guidance

• Lock down browser extensions tied to AI workflows Create allowlists for browser extensions, block unmanaged AI productivity add-ons, and review extension permissions where users access chat tools or internal data.
• Harden install and command-copy workflows Treat cloned installation pages and copy-paste terminal prompts as a phishing surface.
• Prioritise phishing-resistant authentication for browser-heavy users Move high-risk users away from reusable MFA methods toward phishing-resistant controls, then monitor for token theft and session replay where collaboration platforms and browser sessions intersect.

What's in the full report

Expel's full quarterly threat report covers the operational detail this post intentionally leaves for the source:

• Month-by-month incident breakdowns for Q1 2026 across malware, identity, endpoint, and cloud categories
• The specific telemetry behind ChatGPT Stealer, InstallFix, and ClickFix activity in Expel Workbench
• The full list of malicious browser-extension and cloned-installation patterns observed by the SOC
• Quarterly trend data that shows how credential weaponization changed heading into Q2

👉 Read Expel's Q1 2026 quarterly threat report on AI-driven delivery and credential risk →

AI as bait in Q1 threat data: what should security teams watch?

Explore further

View Full Forum →  |  NHI Foundation Course →