← Back to Feed

Threat Actors Abuse claude.ai Shared Chat for ClickFix Malvertising Campaign

June 17, 2026 · Trend Micro · Severity: HIGH

Cybercriminals hijacked Google Ads searches for popular AI developer tools to funnel over 2,000 victims toward malicious download pages before quietly moving their operation onto claude.ai's own platform, turning the trusted domain into a delivery mechanism for credential-stealing malware.

Key Takeaways

  • Cybercriminals hijacked Google Ads searches for popular AI developer tools to funnel over 2,000 victims to malicious pages.
  • The operation moved onto claude.ai's own platform, turning the trusted domain into a delivery mechanism.
  • The ClickFix malvertising campaign delivers credential-stealing malware via shared chats.
☕ Buy a Coffee