
- Crooks abused Claude’s “Shared Chats” feature to plant fake install instructions leading to infostealer infections
- Fraudulent chats were promoted via Google Ads, showing authentic Claude URLs to trick Mac users
- Campaign used ClickFix tactics, spoofed “Apple Support,” and avoided targeting Russian‑language systems
Cybercriminals are abusing legitimate Claude and Google Ads services to trick Mac users into installing infostealing malware on their devices, experts have warned.