ANY.RUN analyzes 1,258 fake AI campaign submissions, exposing malicious installers, session theft, credential phishing, and detection strategies for SOC teams.