CYBERSECURITYTRACKER
Permanent story citation

Hackers abuse Google Ads, Bing redirects to push Claude ClickFix attacks

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 9916

As cited

Copy frozen at (site build).

threat intel

Hackers abuse Google Ads, Bing redirects to push Claude ClickFix attacks

Threat actors are exploiting legitimate Bing redirects within Google Ads to route users to fraudulent Claude installers that deliver ClickFix malware. The attack chains paid search advertisements with redirect services to obscure the final destination and increase the likelihood of successful deception.

Why it matters: Users searching for Claude may encounter malicious ads leading to ClickFix infections, and security teams should monitor employee interactions with search results and educate on installer verification.

VendorsGoogle
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary