In an ongoing malvertising campaign, attackers are misusing Google Ads and genuine Claude.ai shared chats.
When a user searches for “Claude mac download,” sponsored search results may appear with claude.ai listed as the target URL; nevertheless, these results may lead to instructions that infect their Mac with malware. Security engineer Berk Albayrak of Trendyol Group noticed the campaign and posted his observations on LinkedIn.
Albayrak discovered a shared Claude.ai chat that poses as an official installation tutorial for “Claude Code on Mac” and is credited to “Apple Support.” Users are guided by the chat to launch Terminal and paste a command that secretly downloads and launches malware on their Mac.
BleepingComputer discovered a second shared Claude chat executing the identical assault using completely different infrastructure while trying to confirm Albayrak’s conclusions read more about Hackers abuse Google ads Claude.ai chats to push Mac malware
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.