Hackers use Bing redirects in Google ads to promote fake Claude installers

• 

  Hackers are using Google search ads and Bing redirects to promote fake Claude installers that deliver malware.

• 

  The technique, called Adception, routes users through Bing's click-tracking endpoint to a compromised South American retailer's website.

• 

  The retailer's site redirects users to a fake Claude download page at claude-desk-code[.]com.

• 

  The fake installer imitates Claude's macOS installation process but runs a malicious command in the background.

• 

  The campaign uses cloaking to make the malicious payload harder for security scanners and direct visitors to detect.

Who

Hackers are behind the Adception campaign.

What

They use Google ads and Bing redirects to send users to fake Claude installers that deliver malware.

When

Not stated.

Where

The campaign uses Google search ads, Bing's click-tracking endpoint, and a compromised South American retailer's website.

Why

To trick users into downloading a fake installer that executes a malicious payload.

This story does not have two clearly opposing sides.

No direct quotes in the coverage so far.