ทันเอไอ

Massive Web Vulnerability Scanning Campaign Detected Disguising as AI Bots Like ClaudeBot

Developers and system administrators have detected a surge in website vulnerability scans using fake identities of popular AI bots to bypass security defenses.

The developer community on Hacker News and reports from Knownagents have highlighted a cybersecurity issue after detecting a high volume of suspicious website vulnerability scans. These scans spoofed User-Agent strings to mimic legitimate AI bots (such as ClaudeBot) to evade detection and blocking by site administrators.

Investigations by developer groups revealed that these bots do not originate from major AI providers. Instead, they leverage Virtual Private Servers (VPS) infrastructure or proxy scripts to trick security systems into mistaking them for legitimate web scrapers.

This incident highlights the broader issue of Bot Spoofing. Cybersecurity firm DataDome previously warned that malicious actors frequently adapt their tactics, exploiting the popularity of AI crawlers to access website resources or probe for vulnerabilities undetected. It confirms that these activities do not come from actual AI systems, but rather use their reputation as a cover for attacks.