Fake Claude Installer Threat — Campaign Analysis & Threat Activity

Threat entity extracted from intelligence sources

Frequency

2

occurrences

First Seen

May 5, 2026

Last Seen

May 5, 2026

Related Threat Clusters

InstallFix Campaign Exploits AI Trust to Deliver Malware via Fake Install Pages
The InstallFix campaign targets users by creating fake installation pages for Anthropic's Claude AI, tricking them into executing malware. This sophisticated social engineering tactic exploits the growing reliance on AI…

53 articles · Updated May 5, 2026

Recent Intelligence Reports

InstallFix and Claude Code: How Fake Install Pages Lead to Real Compromise — Trendmicro · May 5, 2026
InstallFix and Claude Code: How Fake Install Pages Lead to Real Compromise — Feeds.Trendmicro · May 5, 2026

Related Entities

Malware Phishing InstallFix InstallFix Campaign RedLine Stealer T1027 - Obfuscated Files Or Information T1053 - Scheduled Task/Job T1059.001 - PowerShell T1059.005 - Visual Basic T1218.005 - Mshta T1559.001 - Component Object Model T1566.002 - Spearphishing Link