A fake Claude installer is showing up in Google search ads, and it targets Mac users who just want to download the real thing. The trick is a copy button that quietly swaps the command you see for a different one, so the Terminal line you paste is not the one on screen.
The campaign was documented by Push Security and reported by BleepingComputer on October 9, 2026. Here is how it works and how to avoid it.
Here are the facts that matter most:
- Who is targeted: Mac users who search for something like “claude mac” on Google.
- The ad link passes through a Bing redirect, so it appears to come from bing.com.
- The landing page copies Anthropic’s real install command on screen, but the clipboard holds a different one.
- The final payload is not known yet, according to the report.
Skim these four points and you already know the core risk: never paste a command you have not read in Terminal.
How the fake Claude installer reaches your screen
The attackers buy a Google ad that shows a bing.com address. When you click, the request goes through Bing’s own click-tracking redirect, which makes the trip look trustworthy.
Next, you land on a hacked WordPress site that belongs to a South American retailer. That site checks that you came from Bing and sends you on to a fake Claude download page. If you open the same address directly, you just see a 404 error, which helps the scam hide from scanners.
Push Security calls the technique “Adception.” The point is simple: an ad that looks safe at every hop is harder to spot than a link to a strange domain.
Push Security tracks the toolkit as AcSig and found other domains using the same macOS command, payload layout and installer page. So blocking one site will not end this.
The copy button trick, step by step
This is a ClickFix attack. Instead of exploiting a bug, it talks you into running the malicious command yourself. The page tells Mac users to open Terminal and paste an install line.
The line shown on the page matches Anthropic’s real installer command. But when you press copy, the clipboard gets a different command. According to the report, it decodes a hidden Base64 address, silently downloads a file, and pipes it straight into the Mac’s zsh shell.
Terminal then prints a friendly message about downloading Claude from the official site. Nothing looks wrong, which is exactly the goal.
Because you ran the command, macOS treats it as something you chose to do. That is why ClickFix attacks work even on well-protected machines.
Real download vs. fake installer: what to compare
The table below shows the differences you can actually check in a few seconds.
| What to check | Real install | Fake installer page |
|---|---|---|
| How you found it | Typed or bookmarked official address | Sponsored search ad, often via a Bing redirect |
| Direct visit to the site | Loads normally | Shows a 404 error unless you arrive from a search |
| Command in Terminal | The one you read and checked | Different from what the page displayed |
| What Terminal says | Output from the installer you expected | A reassuring “downloading Claude” message, then a hidden download |
If any row in the right column sounds familiar, stop before you press Enter.
How to stay safe from a fake Claude installer
A few habits close this hole, and they work for any developer tool, not just Claude.
- Skip sponsored results. Go to the vendor’s official site by typing the address or using a bookmark.
- Paste the command into a plain text editor first. If it looks longer or stranger than what the page showed, do not run it.
- Be wary of any page that tells you to paste a command into Terminal when a normal app download would do.
The text editor check matters most, because it shows you what the clipboard really holds.
If you already ran a command from a page like this, disconnect from the network and change your important passwords from a different device. Then check for unfamiliar login items and run a malware scan. On a work Mac, tell your IT team right away. We also covered a similar “check your device” problem in our post on Midnight Mimosa malware on cheap Android phones, and our guide to stricter macOS Full Disk Access explains one more layer of Mac protection.
Frequently Asked Questions
Is the real Claude installer unsafe?
No. The attack copies a legitimate command and swaps what lands on your clipboard. The problem is the fake page, not Anthropic’s installer.
Does this affect Windows users?
The report describes the campaign as aimed at macOS. The same ClickFix idea can target any system, so the habit of checking commands applies everywhere.
What malware does the fake installer deliver?
That is unknown. BleepingComputer says the final payload was not identified, so treat any run of the command as a serious security event.
How do I spot a malicious ad?
Look for the “Sponsored” label and be suspicious of any ad for free developer software. When in doubt, scroll past the ads and type the official address yourself.
Our verdict: read before you paste
Treat the Terminal like a door that only you should open. If a page asks you to paste something, read it first, even when it looks identical to a command you trust. A ten-second habit beats a long cleanup.
Leave a Reply