⚠️ QUICK DESCRIPTION
Threat actors are abusing Google Ads and fake Claude “Artifact” project pages to trick users into downloading malicious installers disguised as AI tools.
These downloads deploy stealers, RATs, and backdoors — all while appearing to be legitimate AI productivity software.
💀 THE THREAT
• Fake Claude “Artifact” project pages delivering malware
• Malicious Google Ads redirecting users to trojanized installers
• Attackers impersonate AI tools to gain trust
• Payloads include stealers, RATs, and backdoors
• Malware hidden inside fake setup files
• Campaign targets users searching for AI tools or templates
👁️ WHY IT’S DANGEROUS
•...
16.02.2026 / 23:04
Threat actors are abusing Google Ads and fake Claude “Artifact” project pages to trick users into downloading malicious installers disguised as AI tools.
These downloads deploy stealers, RATs, and backdoors — all while appearing to be legitimate AI productivity software.
💀 THE THREAT
• Fake Claude “Artifact” project pages delivering malware
• Malicious Google Ads redirecting users to trojanized installers
• Attackers impersonate AI tools to gain trust
• Payloads include stealers, RATs, and backdoors
• Malware hidden inside fake setup files
• Campaign targets users searching for AI tools or templates
👁️ WHY IT’S DANGEROUS
•...
