Fake Claude Max giveaway tricks users into handing over their Google account credentials
Malwarebytes found a fake Claude Max giveaway that steals Google credentials via a spoofed sign-in.
Malwarebytes found a phishing page copying Claude branding that claims Anthropic is giving away 10,000 free one-month Claude Max subscriptions. A countdown advertising fewer than 760 remaining slots is generated locally and resets when the page reloads. Clicking Google draws a draggable fake browser window with a padlock and a correctly spelled Google sign-in address, after a human-verification step. The phishing function loads from an external reusable widget whose comments are in Russian and call the visitor the victim; a compromised Google account can expose email, documents, password resets, and Claude access.
56