← Back to Feed
Threat Actors Abuse claude.ai Shared Chat for ClickFix Malvertising Campaign
June 17, 2026 · Trend Micro · Severity: HIGH
Cybercriminals hijacked Google Ads searches for popular AI developer tools to funnel over 2,000 victims toward malicious download pages before quietly moving their operation onto claude.ai's own platform, turning the trusted domain into a delivery mechanism for credential-stealing malware.
Key Takeaways
- Cybercriminals hijacked Google Ads searches for popular AI developer tools to funnel over 2,000 victims toward malicious download pages in a ClickFix malvertising campaign.
- The attackers quietly moved their operation onto claude.ai's own platform, turning the trusted domain into a delivery mechanism for credential-stealing malware.
- Users should avoid clicking ads for AI developer tools and verify download sources, since ClickFix lures now abuse trusted platforms like claude.ai.