Updated

Updated · Fox News · Oct 17

Google Suspends Accounts in Fake Claude Ad Scam as 4 in 5 ClickFix Attacks Hit via Search

Updated

Updated · Fox News · Oct 17

Google Suspends Accounts in Fake Claude Ad Scam as 4 in 5 ClickFix Attacks Hit via Search

Q: How did a fake Claude download page hide a malicious Mac Terminal command behind a simple Copy button?

The fake Claude page hid the malware by making the on-screen install command look harmless while programming the site’s Copy button to place a different command into the user’s clipboard. According to Push Security, the visible text resembled a normal macOS installation command for Claude. But when a user clicked Copy, the page silently substituted a hidden Terminal command. That command was Base64-encoded to obscure its true destination, decoded in the shell, then used to fetch code from an attacker-controlled web address and pipe it directly into `zsh` for execution. That design exploited trust in a familiar download flow. Users thought they were copying the exact command shown on the page, but the clipboard content had been swapped behind the scenes. This is a variation of the broader ClickFix or InstallFix technique, where victims are persuaded to run the malware themselves instead of downloading a suspicious file. The campaign added another layer of deception by using a Google search ad, Bing’s legitimate redirect system and a compromised WordPress site to deliver people to the fake Claude page. It also used cloaking, serving the lure mainly to visitors arriving from Google or Bing while showing others a 404 page, which helped the operation avoid researchers and automated scanners. Researchers said the final payload was not identified, but such commands can lead to data theft, system changes or further malware installation.

2 articles · Updated · Fox News · Oct 17

Google said it suspended the advertiser accounts tied to a campaign that used sponsored search results to steer Mac users to a fake Claude download page.
Push Security found the scam began with a Google ad showing a bing.com destination, then routed victims through Bing click-tracking and a compromised WordPress site before landing on a counterfeit installer.
The fake page displayed a legitimate-looking Anthropic command but copied a different Base64-encoded one to the clipboard, downloading a remote script and piping it to Mac zsh for execution.
Researchers said the operation used cloaking to hide from scanners and direct visitors, while the final payload remains unconfirmed even though the command could enable data theft, file changes or further malware installation.
Microsoft said Defender detects the malicious indicators in the report, and Push Security said four out of five ClickFix attacks it sees now reach victims through search engines.