Fake Claude app promoted by Bing ads pushes SectopRAT malware
A malicious advertising campaign on Bing is promoting a fake version of the Claude AI app, which instead installs the SectopRAT remote access trojan on victims' computers. The fake ad appears when users search for the legitimate Claude AI assistant, leading them to a fraudulent download page. SectopRAT is a known remote access trojan capable of stealing credentials, capturing screenshots, and exfiltrating files from infected systems. The campaign highlights the ongoing risk of malvertising, where threat actors use paid search ads to distribute malware under the guise of popular software.
// why it matters
Developers searching for AI tools like Claude risk downloading malware instead of legitimate software.