Fake Claude App Promoted by Bing Ads Pushes SectopRAT Malware
7 Articles
7 Articles
Hackers hid dangerous malware on a page hidden in Anthopic's Claude.ai domain
Huntress spots malicious Claude Artifact spoofing Claude Desktop, spreading SectopRAT malwareVictims were redirected via Bing ads, infecting at least 29 organizations between July 21–22, 2026Claude removed the artifact after 7,000+ views; malvertising risks persist despite disclaimers on artifactsAt least 29 organizations have been infected with a Remote Access Trojan (RAT) after mistaking a public Claude Artifact for a legitimate Claude page. A…
AI continues to demonstrate an impressive capacity in the technology sector. It plays an increasingly important role in identifying security failures. In a recent discovery, the Claude Mythos model, developed by...
FakeAgent Campaign Uses Malicious Bing Ads and Claude.ai Artifacts to Infect Corporate Users
A dangerous new malware campaign is tricking corporate workers who simply want a desktop version of a popular AI assistant. Between July 21 and July 22, 2026, at least 29 organizations saw unusual software installs and hidden persistence on their systems after staff searched for the Claude desktop app. The attack begins with paid ads […] The post FakeAgent Campaign Uses Malicious Bing Ads and Claude.ai Artifacts to Infect Corporate Users appeare…
Between 21 and 22 July 2026, at least 29 companies were infected by a malware after having thought they were downloading Claude's desktop app... directly from claude.ai. Some hacking campaigns are distinguished by their technical sophistication, others by their toupet.
IT Security Guru
cybernoz.comFakeAgent Campaign: Malicious Claude Artifact Used to Distribute SectopRAT to 29 Organisations
Researchers at Huntress have disclosed a malvertising campaign that abused a public artifact hosted on Anthropic’s own claude.ai domain to distribute the SectopRAT information-stealing Trojan, compromising at least 29 organisations in the space of two days. The campaign, which Huntress has named FakeAgent, ran between 21 and 22 July 2026. Victims searching for “Claude Desktop app” on Bing were served a sponsored advertisement that, unlike the su…
Coverage Details
Bias Distribution
- 67% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
