Possible ACR Stealer From Page Impersonating Claude, (Tue, May 26th)
Source: Isc.Sans.Edu
Published:
<p>In recent weeks, I've searched for pages impersonating Claude that distribute malware. In recent weeks, I've reliably found these sites through malicious ads in Google searches that lead to these pages, often concealed in URLs for sites.google[.]com , such as this example from 2026-05-11 .</p> <p