NewsHive
CONTACT USANALYST PORTAL →
securityBACKGROUND

Hackers abuse Google ads, Claude.ai chats to push Mac malware

BACKGROUND
1 SIGNALFIRST DETECTED 10 May 2026
Narrative synthesis pending — 1 signal collected.
How the story developed
10 May
7.3
Other feeds and industry voices
23 Jul
Fake Claude app promoted by Bing ads pushes SectopRAT malware

A malvertising campaign on the Bing search service is pushing a fake Claude desktop app installer hosted on a legitimate Claude.ai domain to deliver the SectopRAT malware. [...]

REPORT · WHAT · BleepingComputerOPEN STORY
12 May
Fake Claude search results lure Mac users into ClickFix attack

Researchers found a ClickFix campaign that uses fake Claude setup guides to trick Mac users into infecting themselves.

REPORT · WHAT · Malwarebytes LabsOPEN STORY
10 Apr
Fake Claude site installs malware that gives attackers access to your computer

We found a convincing fake site that installs a trojanized Claude app while quietly deploying PlugX malware.

REPORT · WHAT · Malwarebytes LabsOPEN STORY
11 Sept
Claude Used to Automate Exploitation and Data Theft Across Multiple Victims

Anthropic has warned that cybercriminals and state-sponsored hackers alike are using its Claude models for cyber attacks, weapons design, propaganda, and mass surveillance between

REPORT · HOW · The Hacker NewsOPEN STORY
7 May
Fake Claude AI website delivers new 'Beagle' Windows malware

A fake version for the Claude AI website offers a malicious Claude-Pro Relay download that pushes a previously undocumented backdoor for Windows named Beagle. [...]

REPORT · WHAT · BleepingComputerOPEN STORY
30 Aug
Anthropic warns infostealer malware is hijacking Claude sessions to drain usage

Anthropic is warning some Claude users that infostealer malware on their PCs has stolen active Claude login sessions, allowing attackers to access accounts and consume their

REPORT · WHAT · BleepingComputerOPEN STORY
1 Sept
Infostealers are hijacking Claude accounts at users’ expense

Anthropic has warned that infostealers are stealing Claude session cookies to access users’ accounts and consume usage at their expense.

REPORT · WHAT · Malwarebytes LabsOPEN STORY
24 Mar
A Top Google Search Result for Claude Plugins Was Planted by Hackers

&#32; submitted by &#32; <a href="https://www.reddit.com/user/404mediaco"> /u/404mediaco </a> <br /> <span><a

OPINION · WHAT · ArtificialInteligenceOPEN STORY
Sources
BleepingComputer

NewsHive monitors these sources continuously. All signal titles above link to the original reporting.

Intelligence by NewsHive. Need help navigating what this means for your business? Contact GeekyBee →