Skip to content
NewA calmer, faster ZeroHour
StoryMalwarehigh

Fake Claude.ai pages and Google Ads spread macOS and Windows stealers

2 sources · 2 articlesFirst reported Updated ()1
What's new

First merged summary.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

Attackers used claude.ai Shared Chats, Artifacts, and Google Ads to deliver Atomic macOS Stealer and a Windows .NET payload.

Gen Digital says attackers hosted fake Claude download instructions as user-generated Shared Chats and Artifacts on claude.ai and bought Google Ads so the pages appeared in search, without compromising Anthropic. The real desktop download page is claude.com/download. The macOS lure asks visitors to paste a Terminal command that installs Atomic macOS Stealer, which steals passwords, browser data, Keychain material, documents, and wallets and can replace Ledger or Trezor apps. A separate Windows lure uses Win+R and PowerShell to fetch an encrypted .NET payload with remote-access behavior from GitHub and a github.io page.

Key facts
  • Gen Digital published the research on October 26, 2026.
  • Pages used claude.ai/share/ and claude.ai/artifact/ paths and Claude branding.
  • Ad links carried gclid and gad_campaignid parameters tied to two campaigns.
  • AMOS seeks files such as .wallet, .seed, .pem, and .ovpn.
  • The .NET payload checks antivirus, takes screenshots, and searches crypto wallets.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Timeline

dated events in the reporting · oldest first
  1. Oct 26, 2026Gen Digital published research on the fake Claude lures. · Cyber Security News

What each outlet adds

beyond the shared facts
  • Cyber Security NewsResearch date, GitHub delivery, and .NET payload behaviors.
  • GBHackersShare and artifact paths, password dialog, and phrase collection server.
Vendors
AnthropicGoogle
Products
ClaudeLedger LiveTrezor Suite
Malware
Atomic macOS StealerAMOS
Organizations
Gen DigitalGoogle
AI models
Claude

Coverage

oldest first · one row per article · UTC
  1. · 3d ago Cyber Security NewsFirst report

    Fake Claude downloads on claude.ai and Google Ads push stealers

    Mac users who paste the ClickFix command get Atomic macOS Stealer; a separate Windows lure delivers an encrypted .NET payload.

  2. · 3d ago GBHackers

    Google Ads push fake Claude downloads on claude.ai that install stealers

    macOS ClickFix commands fetch Atomic macOS Stealer; a Windows Artifact runs a packed .NET payload with remote access.