Hackers abuse Google Ads, Bing redirects to push Claude ClickFix attacks

Automated excerpt

The technique, dubbed "Adception" by security researchers at Push Security, appears designed to evade advertising security checks by using Bing's trusted domain as the ad destination, before redirecting victims through a compromised website to the malicious download page. The attack also uses multiple layers of cloaking to prevent security scanners and visitors who access the malicious URLs directly from seeing the payload. The compromised website then redirected the visitor to claude-desk-code[. ]com, a fake Claude download page designed to trick macOS users into executing malicious commands.

Selected automatically from source text; not independently written or fact-checked. Read the original for full context.