Gen Digital

Search everything

Mentions · 7d2
Mentions · 30d3
All mentions8
First seenAug 26, 2026
Last mentioned3d ago

Timeline

8 articles · newest first

Google Ads push fake Claude downloads on claude.ai that install stealers

macOS ClickFix commands fetch Atomic macOS Stealer; a Windows Artifact runs a packed .NET payload with remote access.

GBHackersOct 27, 10:53 UTC · 3d agoMalware 2 sources1

Fake Claude downloads on claude.ai and Google Ads push stealers

Mac users who paste the ClickFix command get Atomic macOS Stealer; a separate Windows lure delivers an encrypted .NET payload.

Cyber Security Newsupdated Oct 27, 10:53 UTC · 3d agofirst Oct 27, 04:40 UTC · 4d agoMalware 2 sources1

Warden Stealer Spreads Through ClickFix, Malvertising, Cracked Software and Game Cheats

Gen Digital details Warden Stealer, a Rust MaaS infostealer spread via ClickFix, malvertising, cracked software, and fake game cheats stealing browser, wallet, and AI tokens.

Cyber Security NewsOct 9, 12:32 UTC · 21d agoMalwareExploited5 · 3 reads

GPT4Free Privacy Risks Expose AI Prompts to Third-Party Servers and Hidden Logs

Gen Digital researchers found GPT4Free's hosted chat routes prompts through third-party servers, mislabels models, and logs IPs and conversations for up to 30 days.

GBHackersSep 17, 12:04 UTC · Sep 17, 2026AI safety & security4

Hackers Target Claude, Cursor and Codex AI Agents to Steal Tokens and Prompt Histories

Gen Digital found infostealers like Amatera and Remus stealing AI coding agent tokens, prompt histories, and MCP configs from infected Windows and macOS machines.

Cyber Security NewsSep 9, 11:41 UTC · Sep 9, 2026MalwareExploited5

Four REVSTEALER-Linked Modules Disable Windows Update and Defender to Run a Crypto Miner

Elastic documents four persistent REVSTEALER-linked tools (ProManager, WinUpdate, SoftManager, LockAppHost); LockAppHost disables Windows Update and Defender to run a crypto miner.

The Hacker NewsSep 6, 08:34 UTC · Sep 6, 2026MalwareExploited1 · 1 read

WordlistLoader Delivers Amatera via ClickFix, SynkLoader Phishes Windows Passwords

Gen Digital details WordlistLoader delivering Amatera Stealer via ClickFix and EtherHiding, while SynkLoader phishes Windows credentials through Microsoft Teams.

The Hacker NewsAug 26, 05:08 UTC · Aug 26, 2026Malware1 · 1 read

Appears with

Anthropicvendor · 4
Gen Digitalvendor · 3
Claudeproduct · 3
Atomic macOS Stealermalware · 2
Microsoftorganization · 2
Geminiai model · 2
Claudeai model · 2
Googlevendor · 2
Amateramalware · 1
Entra Verified IDproduct · 1
Microsoft Defenderproduct · 1
Djinn Stealermalware · 1
AMOSmalware · 1
Anthropicorganization · 1
ACR Stealermalware · 1
REVSTEALERmalware · 1

Entities are extracted by the model from each article. First seen Aug 26, 2026, last mentioned 3d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.