What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Fake Claude, ChatGPT and other AI-tool downloads are increasingly being used to deliver malware. Attackers copy trusted names across lookalike websites, search ads, package repositories and even user-published pages hosted on legitimate AI platforms. For developers, one download or pasted terminal command can expose API keys, source code, cloud accounts and cryptocurrency wallets.
What the new attack figures show
Kaspersky reported that its products detected more than 92,000 malware and potentially unwanted-program attacks disguised as AI agents or services between January and early May 2026. Fake ChatGPT applications represented 49% of those detections, while Claude and Gemini each accounted for 18%.
As an Amazon Associate I earn from qualifying purchases.
The Cloud Security Alliance (CSA) documented a separate campaign in which a malicious Claude Artifact, hosted on Anthropic’s domain, imitated a Claude Desktop download page. At least 29 organizations were infected with the SectopRAT remote-access trojan before the artifact was removed.
Recommended Free Tools
These incidents do not show that Claude, ChatGPT or their underlying services are malicious. They show that attackers are using familiar AI names as delivery vehicles. Sophos summarized the tactic this way: “Attackers are exploiting the surge in demand for AI software by faking the software itself: names users trust, like Claude, ChatGPT, and Copilot, become delivery vehicles for malware.”
#1 Best Overall
![Norton 360 Deluxe 2027 Antivirus, 3 Devices, Auto-Renews [Download]](https://m.media-amazon.com/images/I/41qw3FS3qLL._SL160_.jpg)
- ONGOING PROTECTION Download instantly & install protection for 3 PCs, Macs, iOS or Android devices in minutes!
- TOP-PERFORMING VPN Faster speeds, more server locations, and greater connection control to protect your privacy across all your devices, including Smart TVs.
- ADVANCED SCAM PROTECTION Help spot hidden scams online. With the built-in Genie AI assistant, you’ll never wonder if a message or email is suspicious again.
- REAL-TIME PROTECTION Advanced security protects against existing and emerging malware threats, including ransomware and viruses, and it won’t slow down your device performance.
- DARK WEB MONITORING Identity thieves can buy or sell your information on websites and forums. We search the dark web and notify you should your information be found.
How the campaigns reach developers
The same basic sequence appears across campaigns: a developer searches for an installation guide, follows a convincing result or shared page, downloads a file or copies a command, and gives the resulting program access to a workstation. The initial lure may look different, but the requested user action is the critical risk point.
| Delivery surface | Typical user action | Common platform or technique | Attacker’s objective |
|---|---|---|---|
| Lookalike website or search advertisement | Download and run an installer | Windows MSI packages, DLL sideloading and startup persistence | Credential theft, information stealing or remote access |
| Fake documentation page | Paste a shell command into Terminal or PowerShell | macOS shell scripts, signed helpers or permission prompts | Steal secrets, establish persistence or harvest browser data |
| Impersonating package | Install a dependency or command-line tool | Typosquatted package names and malicious dependencies | Read source code, CI credentials, API keys or cloud tokens |
| User-published artifact or shared conversation | Trust a page because it is hosted on a familiar AI domain | Embedded download links and copy-paste instructions | Deliver a stealer, remote-access trojan or wallet malware |
| Browser extension | Install an extension that promises AI features | Excessive browser permissions and injected scripts | Capture sessions, cookies, credentials or clipboard contents |
Why a real domain or HTTPS certificate is not enough
A secure connection proves only that the browser reached the named website over an encrypted channel. It does not prove that a user-uploaded file, artifact, package or conversation hosted there is safe. In the CSA’s FakeAgent campaign, the malicious Claude Artifact appeared on Anthropic’s own domain while impersonating a desktop-download page.
Rank #2
![Norton 360 Deluxe 2027 Antivirus, 5 Devices, Auto-Renews [Download] | Includes Scam Protection, Advanced VPN, Dark Web Monitoring, & PC Cloud Backup](https://m.media-amazon.com/images/I/41IYV5zGyCL._SL160_.jpg)
- ONGOING PROTECTION Download instantly & install protection for 5 PCs, Macs, iOS or Android devices in minutes!
- TOP-PERFORMING VPN Faster speeds, more server locations, and greater connection control to protect your privacy across all your devices, including Smart TVs.
- ADVANCED SCAM PROTECTION Help spot hidden scams online. With the built-in Genie AI assistant, you’ll never wonder if a message or email is suspicious again.
- REAL-TIME PROTECTION Advanced security protects against existing and emerging malware threats, including ransomware and viruses, and it won’t slow down your device performance.
- DARK WEB MONITORING Identity thieves can buy or sell your information on websites and forums. We search the dark web and notify you should your information be found.
CSA recommends treating links to AI-platform artifacts and shared conversations, including pages on claude.ai, chatgpt.com and grok.com, as untrusted external content for secure-web-gateway and email-filtering policies. A familiar domain should therefore be verified at the level of the specific publisher, file and instruction—not accepted as a blanket allowlist.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Fix the driver behind crashes, sound loss and screen glitches3Clear out junk files and repair common Windows errorsWhat the malware can take
Once a developer runs the installer or command, malware may operate with the user’s existing permissions. That can be enough to:
Rank #3
- THREAT DETECTION – Stay one step ahead. Suspicious links, risky sites, viruses, and scams, caught automatically before they reach you.
- PERSONAL INFO PROTECTION – Keep your personal info safer. Identity monitoring watches for your exposed info and tells you what to do about it.
- SECURE CONNECTIONS – Just a few clicks, and your info stays protected on public Wi-Fi every time you connect.
- PERSONAL DATA SCANS – Take your info off the market. We’ll find your personal information on sites selling it, then guide you on how to remove it.
- SOCIAL PRIVACY MANAGER – Decide what you share. McAfee finds the privacy settings buried in your social accounts and fixes them.
- Search environment files, shell history, configuration files and password stores for API keys and access tokens.
- Read proprietary source code, local repositories, build artifacts and SSH credentials.
- Use cloud credentials to access storage, databases, deployment systems or hosted workloads.
- Install a remote-access component that lets attackers return after the original download.
- Monitor browsers, clipboard data and authentication sessions.
- Replace or tamper with cryptocurrency-wallet applications and phish recovery phrases.
Malwarebytes documented a fake Claude site that used DLL sideloading: the package looked like a Claude installation but placed additional components that loaded a backdoor. In a MacSync campaign described by TechRadar, a polished Claude installation guide on a shared claude.ai page instructed users to paste a Terminal command. The reconstructed chain included an information stealer, remote-access trojan, permission-harvesting helper and trojanized wallet applications.
Windows and macOS lures differ, but the risk is the same
Windows
Windows campaigns commonly package the lure as an MSI installer or executable. DLL sideloading lets a legitimate-looking program load a malicious library, while startup folders, scheduled tasks or registry entries can provide persistence. An installer that displays the expected product name is not proof that every bundled component came from the vendor.
Rank #4
![Norton 360 Platinum 2027 Antivirus, 20 Devices, 3 Months Free [Download]](https://m.media-amazon.com/images/I/51kAiFhngDL._SL160_.jpg)
- ONGOING PROTECTION Download instantly & install protection for 20 PCs, Macs, iOS or Android devices in minutes!
- TOP-PERFORMING VPN Faster speeds, more server locations, and greater connection control to protect your privacy across all your devices, including Smart TVs.
- ADVANCED SCAM PROTECTION Help spot hidden scams online. With the built-in Genie AI assistant, you’ll never wonder if a message or email is suspicious again.
- REAL-TIME PROTECTION Advanced security protects against existing and emerging malware threats, including ransomware and viruses, and it won’t slow down your device performance.
- DARK WEB MONITORING Identity thieves can buy or sell your information on websites and forums. We search the dark web and notify you should your information be found.
macOS
macOS campaigns often rely on shell commands, signed helper tools and prompts for accessibility, files-and-folders or administrator permissions. Wallet-app replacement and recovery-phrase phishing are particularly damaging because the victim may believe the replacement application is an update or compatibility fix.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallHow to verify an AI coding tool before installing it
- Start from an independently opened official source. Type the vendor’s known web address yourself or use documentation already bookmarked by your organization. Do not use the first sponsored result, a shortened link or a URL copied from a chat.
- Match the exact publisher and download location. Check the domain spelling, package owner, signing information and release notes. A one-character change, extra hyphen or unfamiliar subdomain is a warning.
- Prefer distribution channels your organization already controls. Use managed app catalogs, package registries with verified ownership, code-signing enforcement and reproducible lockfiles where available.
- Inspect commands before running them. Expand shortened URLs, identify every download and pipe operation, and reject commands that fetch and execute opaque scripts, modify shell startup files or request unrelated privileges.
- Review dependencies and permissions. A small AI utility should not need broad filesystem access, browser data, wallet files or cloud-administrator credentials. Remove optional packages and extensions that are not required.
- Scan and test in isolation. Use endpoint protection and a disposable virtual machine or sandbox for unfamiliar installers. Never test an unverified file on a workstation that holds production keys.
Controls security teams should combine
- Application allow-listing: permit approved binaries and interpreters rather than relying only on reputation scores.
- Endpoint detection and response: alert on new persistence, credential-store access, suspicious child processes and unusual outbound connections.
- Dependency governance: pin versions, review package ownership and scan transitive dependencies before they enter builds.
- Browser-extension control: restrict installation and audit permissions for extensions that can read every page or modify downloads.
- Credential monitoring: watch for API keys used from new countries, hosting providers, devices or time patterns, and enforce short-lived tokens where possible.
- Secure-by-design policy: prohibit copy-pasted production commands from advertisements, public chats or unreviewed AI-generated pages.
If you already ran a suspicious installer or command
- Disconnect the machine from networks, but do not wipe it immediately if your security team needs forensic evidence.
- From a separate, trusted device, revoke and rotate API keys, passwords, SSH keys, session tokens and cloud credentials that were present on the affected system.
- Notify your security or incident-response team and preserve the downloaded files, command history, timestamps, domains and endpoint alerts.
- Check source-control, cloud, CI/CD and wallet activity for unauthorized access or changes.
- Use your organization’s approved malware-removal or reimaging process before returning the device to sensitive work.
The practical rule is simple: treat every installer, package, terminal command and shared AI page as untrusted until its publisher, contents and permissions have been independently verified. The name of an AI service—and even the domain displaying the instructions—cannot substitute for that check.
Quick Recap
Best Value
![Malwarebytes Standard, Premium Security| Amazon Exclusive | 18 Months, 2 Devices | Windows, Mac OS, Android, Apple iOS, Chrome [Online Code]](https://m.media-amazon.com/images/I/41LbYnawq9L._SL160_.jpg)
- AWARD WINNING Antivirus, anti-malware, anti-spyware & more
- 24/7 REAL TIME PROTECTION against emerging malware threats, including ransomware and viruses- without slowing you down.
- PROTECTS YOUR DEVICES ON MULTIPLE PLATFORMS: Get cyber protection for your computers, smartphones, or tablets- Compatible with Windows, Mac, Android, iOS
- DOWNLOAD AND INSTALL INSTANTLY
- UNMATCHED THREAT DETECTION: We found malware on 40 percent of devices that already had a third-party antivirus installed.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
