Fake Claude Max giveaway hides a Google account phishing trap
A fake Claude Max giveaway uses a spoofed Google login window to steal account credentials.
Malwarebytes Labs reported a phishing site offering 10,000 free one-month Claude Max subscriptions and claiming Anthropic had passed 100 million users. Every sign-in path leads to a draggable fake Google window, complete with a padlock and spoofed address, drawn inside the phishing tab. A reusable external widget, whose comments are in Russian and refer to victims, supplies the fake login. Stolen Google credentials could expose email, documents, password resets, and Claude accounts linked to Google.
- Fake Claude Max giveaway claims 10,000 free one-month subscriptions.
- Slot counter is generated locally and resets when the page reloads.
- Fake draggable window spoofs Google's padlock and sign-in address.
- A reusable widget with Russian comments supplies the phishing window.
- Compromised Google logins can expose email, documents, and linked Claude accounts.
- Products
- Claude Max
- Organizations
- MalwarebytesAnthropicGoogleMicrosoftUnit 42
- AI models
- Claude
From the original article
5 min read at malwarebytes.com
A convincing offer of a free Claude Max subscription uses a fake browser window to steal Google login information.
By @malwarebytes · malwarebytes.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.