Hackers abuse Google Ads and Bing redirects in Claude ClickFix attacks

Hackers are abusing legitimate Bing search result redirects as click links within Google search ads to direct web users to fake Claude installers, BleepingComputer reported on October 9, 2026. The malicious ads deliver ClickFix attacks to unsuspecting visitors. Push Security researchers discovered the campaign after detecting a malicious Google ad that targeted users searching for the term claude mac, according to BleepingComputer. [1]

BleepingComputer reported that the compromised website redirected visitors to a malicious landing domain. The attack campaign uses multiple layers of cloaking to hide the payload from security scanners and from individuals who access the malicious links directly. [1]

Google Ads is an online advertising platform that allows advertisers to display digital advertisements across search engine results, mobile applications, and non-search websites. Claude is a series of large language models developed by the software company Anthropic, which first released the artificial intelligence chatbot in March 2023. [3][4][6]