Back Technadu

Google Ads and Claude.ai Shared Chats Abused to Distribute Mac Malware

Technadu • May 11, 2026

Attackers abuse Google Ads and legitimate Claude.ai shared chats to distribute malware targeting macOS systems in an active malvertising campaign. Individuals searching for "Claude mac download" may encounter results that deceptively list claude.ai as the verified target website, cybersecurity researchers warn.

The malvertising campaign was initially spotted by Berk Albayrak, a security engineer at Trendyol Group. Albayrak identified a specific Claude.ai shared chat that masqueraded as an official "Claude Code on Mac" installation guide, falsely attributed to Apple Support.

During subsequent verification, BleepingComputer discovered a second shared Claude chat operating through an entirely separate infrastructure. Both malicious chats remained publicly accessible at the time of writing.

These weaponized chats utilize targeted social engineering, providing deceptive instructions that direct users to open the macOS Terminal and paste specific commands. Executing these commands silently downloads and runs malware on the host operating system.

The mac campaign deploys a couple of malware variants. One identified variant actively checks the compromised machine for Russian or CIS-region keyboard inputs. If the machine passes this geographic check, the script collects the victim's:

After transmitting this profiling telemetry to the attacker, it executes a second-stage payload through osascript, the built-in macOS scripting engine.

Albayrak identified another payload variant functioning as a MacSync macOS infostealer, which harvests browser credentials, session cookies, and highly sensitive macOS Keychain contents, transmitting the packaged data directly to the threat actor's command server.

In March, Claude Code was weaponized in a Mexican government cyberattack, exposing roughly 195 million identities. In November, 2025, Chinese state- GTG-1002 leverageed Claude AI and MCP for cyberespionage targeting tens of organizations.

Early last year, Amos Stealer was distributed to MacOS and Linux users via Google Ads tht fake Homebrew site and a Google Ads phishing campaign targeted Microsoft advertisers.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

InstallFix Campaign Exploits AI Trust to Deliver Malware via Fake Install Pages The InstallFix campaign targets users by creating fake installation pages for Anthropic's Claude AI, tricking them into executing malware. This sophisticated social engineering tactic exploits the growing reliance on AI tools, affecting both developers and non-technical users. The malware, primarily the Amatera Stealer, collects sensitive information and establishes persistence on compromised systems. Attackers use Google Ads to promote these malicious pages, which mimic legitimate installation commands. The campaign has been observed impacting users on both Windows and macOS platforms. Security researchers have identified the use of PowerShell and MSHTA to execute malicious commands. The threat landscape is evolving as attackers leverage common developer habits, increasing the risk of infection. Organizations are urged to remain vigilant against these deceptive tactics. 53 sources 70

Extracted Entities

Google Ads and Claude.ai Shared Chats Abused to Distribute Mac Malware

The full story

Extracted Entities

Attack Types (2)

Domains (1)

Malware (2)

MITRE ATT&CK (2)

Platforms (3)

Tools (2)