Scammers expand Claude malware campaign to target Mac users via ads and fake support sites

Building on earlier reports of fraudulent Claude sites, scammers have begun hijacking Claude AI chats and Google advertisements to distribute malware aimed at Mac users. Fake support pages for the Claude service are now circulating online as part of the scheme.

The campaign uses deceptive websites that impersonate official Claude support resources. These pages appear in search results and sponsored ads, tricking users into downloading harmful software onto their Apple computers. Researchers had previously identified similar fake Claude interfaces delivering backdoor malware.

Related Articles

Dramatic illustration of Anthropic imposing a paywall on Claude AI, blocking third-party agents from overloaded servers.
Image generated by AI

Anthropic ends unlimited Claude access via third-party agents, requires extra payments for heavy use

Reported by AI Image generated by AI

Anthropic has restricted unlimited access to its Claude AI models through third-party agents like OpenClaw, requiring heavy users to pay extra via API keys or usage bundles starting April 4, 2026. The policy shift, announced over the weekend, addresses severe system strain from high-volume agent tools previously covered under $20 monthly subscriptions.

Cybersecurity researchers have identified a fraudulent website mimicking the popular AI tool Claude that delivers backdoor malware to visitors. The discovery highlights how cybercriminals are capitalizing on growing interest in artificial intelligence platforms.

Reported by AI

A Palo Alto security firm says it built a working macOS exploit in five days with help from Anthropic's Claude Mythos Preview. The researchers met Apple officials at Apple Park to discuss the findings.

Attackers have created a fake OpenAI repository on Hugging Face that has reached the top spot but installs infostealer malware.

Reported by AI

Daemon Tools, a popular disk image mounting app, was compromised in a supply-chain attack starting April 8, delivering malware through official updates. Security firm Kaspersky reported infections on thousands of machines across over 100 countries. Users are urged to scan their systems immediately.

This website uses cookies

We use cookies for analytics to improve our site. Read our privacy policy for more information.
Decline