No—don’t install Claude from a Google ad. A Google sponsored result can lead through legitimate-looking redirects to a fake installer, and a page can show a genuine-looking instruction while copying a different command to your clipboard. In an incident reported by Push Security on October 9, 2026, the attack depended on the visitor running that copied command; the report does not establish a confirmed victim count or whether the campaign remains active.
How the October 2026 redirect chain worked
Push Security reported that a sponsored Google result for the search “claude mac” showed bing.com as its visible domain. That visible address did not reveal the full destination. According to Push, clicking the ad led through Google’s ad-click redirect, Bing’s click-tracking route, a compromised retailer’s “about us” page, and finally a fake Claude download page.
- Google ad: The sponsored result appeared to point to Bing.
- Bing redirect: The click passed through Bing’s tracking page, which forwarded the browser.
- Compromised website: A retailer’s page redirected visitors who matched checks that included a Bing referrer and browser headers.
- Fake installer: The final page checked the referrer too, sending direct visits to a 404 page instead of displaying the lure.
This selective routing helps explain why someone who opens the final address directly might not see the same content as a person who follows the ad. It does not mean Bing itself served malware, or that Anthropic created the fake page. Push’s report describes attackers abusing a redirect and a compromised site. The fact that an ad appeared in search results is not a safety endorsement.
The page showed one command and copied another
The fake page looked like a polished Claude download experience. It displayed Anthropic’s legitimate-looking installation instruction, but Push found that the page’s Copy button put different content on the clipboard. That concealed command printed a Claude-style message, decoded a hidden address, fetched a script from attacker-controlled infrastructure, and piped it to zsh.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errorsAs an Amazon Associate I earn from qualifying purchases.
The mismatch is central to the attack: text that looks safe on screen does not prove that the clipboard contains the same text. The decisive step was the user running the copied command. Push did not establish how many people executed it, identify a named threat actor, or verify whether the chain was still active when its report was published.
Push calls this pattern “Adception,” meaning a search-engine result placed inside an ad for another search engine. That is Push’s descriptive label, not an established industry-wide classification.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Claude-themed ClickFix reports describe separate campaigns
“ClickFix” describes a tactic in which a page persuades someone to perform an action—such as pasting a command into Terminal or launching a Windows utility—that retrieves or runs malware. The reports below share a reliance on user action, but they document different routes and payloads. The available reporting does not establish that they were all run by the same operator.
| Report | Delivery route | Action and reported payload | Scale, with qualification |
|---|---|---|---|
| Push Security, October 9, 2026 | Google ad appearing to point to Bing; Bing click-tracking redirect; compromised retailer page; fake Claude download page. | On macOS, the Copy button supplied a command that fetched and ran a script through zsh. | No confirmed victim count is established in the report. |
| Bitdefender, March 11, 2026 | Fake Claude Code Google ads led to a fake documentation page hosted on Squarespace. | Windows instructions used mshta.exe; macOS instructions used an obfuscated shell command and retrieved a Mach-O backdoor. Bitdefender said the campaign relied on victims following instructions, not a software flaw. | No comparable victim total is stated in the report summary. |
| BleepingComputer, February 13, 2026 | Google results led to public Claude artifacts or a Medium page impersonating Apple Support. | Visitors were told to paste shell commands into Terminal; the reported payload was MacSync. | Moonlock researchers observed at least 15,600 views of a malicious guide. BleepingComputer also reported that more than 10,000 users had accessed content with dangerous instructions. These are views and accesses, not confirmed infections. |
| Malwarebytes, May 12, 2026 | Sponsored Google results that appeared to lead to Claude resolved to shared Claude chats imitating installation or Apple Support instructions. | The chat directed users to paste a Base64-encoded command into Terminal, followed by a loader and second-stage payload. | No comparable victim total is stated in the report summary. |
| CSO Online coverage of TrendAI research, June 18, 2026 | A separate seven-week, six-wave campaign used Google Ads, GitLab Pages, and later Claude shared chats, targeting developer-tool searches. | The reported delivery route changed over the campaign; the summary does not specify a single payload for this comparison. | CSO Online reported more than 2,000 victims and 92 malicious GitLab hostnames for this campaign. Those figures do not describe the October redirect or the February guide’s views and accesses. |
These distinctions matter: a malicious guide’s views are not infection counts, and a victim figure from one campaign cannot be transferred to another. Trusted hosting, a familiar brand, or a search ad’s visible domain may appear in a delivery chain without making the final page trustworthy.
Quick Recap
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
How to verify a Claude installation safely
- Leave the ad and open Anthropic’s official documentation independently. Type the official address yourself or use a trusted bookmark; do not rely on an ad’s visible domain or a redirect chain.
- Read the installation steps on that official page. Do not take a command from an advertisement, an unfamiliar website, or a shared AI chat as authoritative.
- Before running any command, inspect its actual text and source. If you used a page’s Copy button, paste into a plain-text editor first and compare the result with the official instructions. Do not execute it just because the web page displays a matching-looking command.
- Stop if the command is obscured, encoded, fetches and runs remote content, or does not match the official instructions. Do not try to decode or run an unfamiliar command as a safety test.
If you already interacted with a suspicious page
- Only visited the page: Close it and do not download or run anything. The reported ClickFix mechanism required the visitor to take an execution step; visiting alone is not evidence that a device was infected.
- Copied text but did not run it: Do not paste it into Terminal or another command runner. Clear the clipboard and close the page.
- Ran a command or launched a requested utility: Treat the device as potentially compromised. Stop entering passwords or handling sensitive information on it, and contact your organization’s IT or security team if it is managed. From a separate, trusted device, secure important accounts and review active sessions. Avoid running cleanup commands supplied by the same page or by an unverified source.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
