Hackers abuse ad networks to push fake Claude ClickFix malware

Security researchers have identified a malicious advertising campaign abusing Google Ads and Bing redirects to distribute malware disguised as Claude AI software. The operation utilizes ClickFix social engineering tactics, displaying fake browser error prompts that trick users into executing malicious PowerShell commands to install infostealers. Attackers purchase legitimate ad placements targeting keywords related to Anthropic’s Claude assistant, redirecting search traffic to compromised landing pages mimicking official download portals. According to security analyses, the scheme relies on user interaction rather than zero-day exploits, making traditional antivirus detection difficult. Anthropic has not commented on specific takedown requests, though ad networks face renewed scrutiny over vetting processes for AI-related search terms. This incident highlights the growing intersection between generative AI brand equity and cybercrime infrastructure, as threat actors capitalize on high-volume interest in new AI tools to scale distribution.