Hackers Abuse Google Ads and Bing Redirects to Push Fake Claude Installers
Cybercriminals are exploiting legitimate Bing search redirects within Google search ads to deliver fake Claude installers and execute ClickFix attacks.

The landscape of online threats continues to evolve as malicious actors find new ways to leverage trusted platforms for cyberattacks. According to reports from BleepingComputer, hackers are currently abusing legitimate Bing search-result redirects as click URLs inside Google search ads, effectively redirecting unsuspecting users toward malicious infrastructure.
When users click on these compromised ads, they land on fake websites designed to distribute fraudulent installers for Claude, a popular AI assistant. The downloading process initiates what security experts refer to as ClickFix attacks, tricking users into manually executing malicious code on their local machines under the guise of fixing minor system errors.
This sophisticated technique highlights how attackers bypass traditional security filters by chaining together trusted services like search engines and ad networks. By mimicking legitimate promotional content, the threat actors significantly increase the success rate of their social engineering campaigns against everyday internet users.
For technology professionals and digital audiences in Uzbekistan and the broader CIS region, such incidents underscore the growing importance of cybersecurity awareness. As artificial intelligence tools like Claude and ChatGPT see widespread adoption, threat actors frequently exploit the popularity of these platforms to target users seeking software downloads.
Security researchers strongly advise exercising caution when clicking on sponsored search results and emphasizing the importance of downloading software exclusively from official vendors. While major tech companies continuously work to block such ad-abuse tactics, maintaining high digital hygiene remains the best defense against evolving malware campaigns.



