That "Download Claude" Ad May Not Be Claude. Here Is How Your Office Should Install AI Apps.
Attackers are buying search ads for AI apps and leading people to perfect copies of the real download page. One short house rule stops most of it.
By John Martines · October 14, 2026 · 6 min
Researchers found a search ad for "claude mac" that showed a real bing.com address and led to a fake install page. Here is how the trick works, and the three-line install rule a small office can adopt this week.
Your office manager gets a new laptop and wants the Claude app on it. She searches "claude mac," clicks the first result, and lands on a page that looks exactly like Anthropic's. There is a box with an install command and a Copy button. The page says to paste it into Terminal. She does. Some text scrolls by, it says something about downloading from Anthropic, and nothing seems wrong.
Nothing on that screen was real except the logo.
That is close to a campaign researchers reported on October 9, 2026. AI tools are now among the most searched-for software, and the people who used to fake bank pages have noticed.
There are two tricks stacked together here.
The first is a fake ad. Someone buys a sponsored search result for a popular app. In the October case, the ad, aimed at people searching "claude mac," showed a real bing.com address. Behind it, the click passed through Google's ad link, then Bing's own click-tracking link, then a real small-business website that had been broken into, and finally to the fake Claude page. Because each step looked legitimate, the ad looked less suspicious than one pointing straight at a strange web address.
The second is called ClickFix. Instead of tricking you into downloading a file, the page tricks you into running a command yourself. On a Mac that means pasting into Terminal. On Windows it usually means the Run box (Windows key plus R), PowerShell or Terminal. The command is presented as a quick install step or a "verify you are human" check. Because a person runs it, a lot of security software never gets a clear chance to object.
In the October case, the fake page even displayed Anthropic's genuine install command. The Copy button quietly put a different one on the clipboard. The researchers at Push Security, who named the campaign "Adception," could not yet say what the final program does. The same team found a similar setup in March that installed software built to steal saved passwords and logged-in sessions from web browsers.
How it got here:
- 2024: Microsoft tracked a ClickFix campaign that impersonated Booking.com during the holiday season, sending hospitality staff to fake "verify you are human" pages.
- August 21, 2025: Microsoft's threat researchers reported that ClickFix campaigns were reaching thousands of business and home devices every day, on Windows and Mac.
- February 2026: Microsoft described a newer version that hides the attack inside an ordinary network lookup typed into the Windows Run box.
- March 9, 2026: Malwarebytes and Push Security reported fake Claude Code install pages, promoted through Google search ads, that installed a password-stealing program called Amatera on Windows and Mac. Malwarebytes called the trick "InstallFix."
- October 9, 2026: BleepingComputer reported the "Adception" campaign: a Google ad, a real Bing redirect, a hacked retailer's website and a fake Claude download page for Mac.
In a big company, staff can't install anything; the IT department does it. In a 10 or 20 person office, the person who wants the app is often the person who installs it, on a laptop that also holds the company email, the bank login and the customer files.
That is what these attacks are after. A password-stealing program doesn't need your password if it can copy the browser's "stay signed in" session. With that, someone can open your email or your accounting software as you, often without triggering a new sign-in.
Two things make AI apps a favorite lure right now. Everyone is searching for them, often for the first time, so nobody knows what the real page should look like. And some of the genuine AI tools really do install with a pasted command, so a page asking for one doesn't seem odd.
The fix is not a new product. It is a habit, written down so everyone follows the same one.
A free account opens the rest of this article and the whole library.