Source: bleepingcomputer.com
Threat actors are abusing legitimate Bing search-result redirect URLs as click-through URLs embedded in Google search advertisements. These malicious ads direct unsuspecting users to fake Claude AI installer pages. Once on these pages, users are subjected to ClickFix-style social engineering attacks, which typically trick victims into manually executing malicious commands or scripts. The campaign leverages the trust associated with both the Claude AI brand and legitimate search engine infrastructure. By chaining Google Ads with Bing redirect mechanisms, attackers increase the apparent legitimacy of their links. This technique makes detection and takedown more difficult for security teams. The attack represents a growing trend of abusing AI tool branding to lure victims. Users are advised to verify software downloads from official sources only.
