Claude ClickFix Attack: Google Ads and Bing Redirects

Yes. Security researchers have reported a ClickFix campaign that used Google Ads and Bing-related redirects to steer people toward fake Claude download pages; the malicious part was the deceptive landing page and the commands victims were persuaded to run, not Claude itself. The incident illustrates how familiar search and advertising pathways can be abused to deliver infostealing malware.

What the reported attack involved

ClickFix is a social-engineering technique: a site presents a convincing problem or instruction, then asks the visitor to take an action that gives malware a way onto the device. In this reported campaign, the lure was a supposed Claude desktop application. Claude is an AI assistant; attackers used its name and the appearance of a legitimate download flow to make the offer seem credible.

Reporting on the campaign described Google Ads as one route for reaching users and Bing-related redirects as part of the traffic path. These details should not be read as evidence that Google, Microsoft, or Claude intentionally distributed malware. Search engines and ad platforms can be abused by advertisers or by compromised intermediary pages, and a redirect can send someone through several web addresses before the final page appears.

How the ClickFix chain works

The exact infrastructure can change between campaigns, but the general pattern is consistent: an attacker attracts a searcher, presents a fake download or support page, and tricks the person into carrying out a command or other action. A typical sequence may look like this:

A person searches for Claude or a desktop download and sees a sponsored result or follows a link that reaches an advertising or redirect chain.
The browser lands on a page designed to resemble an official product page. It may use familiar branding, a download button, or wording that implies the software is required.
The page tells the visitor to perform a manual step. ClickFix campaigns commonly imitate troubleshooting instructions and ask people to copy and run text using system tools.
If the visitor follows the instruction, the command may fetch or launch malicious code. In this campaign, reporting associated the activity with information-stealing malware.

The defining trick is that the user is coached into doing something that security protections might otherwise prevent a downloaded file from doing automatically. A page can make a dangerous action appear like a normal installation or a fix for a browser problem.

Why use search ads and redirects?

Search advertising can put a result close to the top of a page when someone is actively looking for a product. That timing helps a fake download appear relevant. It does not mean every sponsored result is unsafe, nor does a familiar search engine’s presence certify that the destination is genuine.

Redirects add another layer. A link may pass through tracking, ad-serving, or compromised websites before reaching its final destination. The first address a user sees, or the text displayed on a result, may not identify the site that ultimately asks for a download. Attackers can also vary domains and pages as defenders report and block them, so a single URL is not a reliable description of an entire campaign.

What can be stolen, and what is known

Information stealers are malware designed to collect data from an infected device. Depending on the malware and its permissions, that can include saved browser credentials, session cookies, cryptocurrency wallet information, or other files and account data. A stolen session cookie can sometimes let an attacker access an account without entering its password, which is one reason changing a password alone may not be enough after a suspected infection.

Be precise about the evidence: the campaign reports describe a delivery method and malware behavior, but they do not establish that every person who saw an ad was infected, or that every redirect involving Bing or every Claude search was malicious. The ad platform, the redirect chain, the destination site, and the malware operator are separate parts of the story. Attribution and technical details can also evolve as investigators examine new samples.

How to check a Claude download safely

Claude access and app availability can change over time and by operating system, so verify the current download route through the product’s official website or the relevant official app store. Do not treat an ad, a search ranking, a logo, or a page that looks polished as proof of authenticity.

Check the full domain in the address bar before downloading. Look for misspellings, extra words, unusual subdomains, or a domain unrelated to the product.
Navigate to the official product site yourself rather than following a sponsored result or a link in an unexpected message.
Reject instructions that tell you to paste commands into Terminal, PowerShell, a Run dialog, or a browser console to install an app or “verify” a download. A normal download should not require a stranger’s script.
Use your operating system’s built-in protections and keep the browser and system updated. If an installer is offered, check that it comes from a source you trust before opening it.
Report suspicious ads or pages using the platform’s reporting tools, and avoid sharing the link as though it were a legitimate download.

If you already followed the instructions

If you pasted or ran a command from a questionable page, treat the device as potentially compromised. Stop entering passwords or using sensitive accounts on it. From a separate, trusted device, change passwords for important accounts, enable multifactor authentication where available, and sign out of other sessions or revoke active sessions if the service provides that option. Contact your organization’s IT or security team if it is a work device.

Disconnecting a device from the internet may limit further communication, but it does not remove malware. Use reputable security support or your organization’s incident-response process to assess and clean the device. Avoid downloading a second “cleanup” tool from a pop-up or search ad. If you only saw the page and did not download anything or follow its instructions, that alone does not prove the device is infected; close the page and check downloads and browser notifications if anything seems unusual.

Frequently Asked Questions

Did Claude itself cause the ClickFix attack?
No. Claude’s name was used as a lure. The reported method relied on deceptive advertising or redirects and a fake download page, not a malicious feature in Claude.

Can a Google ad or Bing search result contain a scam?
Yes. Advertising and search systems can be abused or can link through unsafe destinations. A sponsored label or high ranking is not a guarantee that a page is official.

Is simply visiting the fake page enough to infect my computer?
Not necessarily. The ClickFix approach described depends on persuading a person to carry out an action, such as running a command. Still, close suspicious pages and do not download or execute anything they offer.

What should I do if I pasted a command from the page?
Stop using the device for sensitive accounts, seek trusted security help, and change important passwords from a separate clean device. Also revoke active sessions where possible and notify workplace IT if applicable.

How do I find the real Claude download?
Start from Claude’s official website or an official app store listing. Verify the web address yourself and do not follow instructions to run copied commands as part of an installation.

Method: the standard formula for this calculation, rounded as each result states. See how the calculators work or report an error.

More cards in this drawer

The whole Numbers and Powers drawer →