Fake Claude app promoted by Bing ads pushes SectopRAT malware
Summary
A malvertising campaign (malicious ads) on Bing search promoted a fake Claude desktop app installer that delivered SectopRAT malware (a remote access trojan that steals information and allows attackers to control compromised systems). The fake installer, disguised as 'ClaudeDesktop.exe,' was hosted on Claude's legitimate domain and compromised at least 29 organizations in July before Anthropic removed it.
Solution / Mitigation
Users looking for software should trust official websites and download portals, instead of search results, especially sponsored ones.
Classification
Affected Vendors
Related Issues
CVE-2026-63086: text-generation-inference through 3.3.7 contains a server-side request forgery (SSRF) vulnerability in the OpenAI-compat
CVE-2026-34371: LibreChat is a ChatGPT clone with additional features. Prior to 0.8.4, LibreChat trusts the name field returned by the e
Original source: https://www.bleepingcomputer.com/news/security/fake-claude-app-promoted-by-bing-ads-pushes-sectoprat-malware/
First tracked: July 23, 2026 at 08:01 PM
Classified by LLM (prompt v3) · confidence: 92%