AI Sec Watch: A Security Intelligence Platform for AI Systems

Luu, T.J.

MediumNews

Hackers abuse Google Ads, Bing redirects to push Claude ClickFix attacks

Source: BleepingComputer(opens in a new tab)
Published: October 9, 2026
Record updated: October 9, 2026

Summary

Hackers are abusing legitimate Bing click-tracking redirects in Google search ads to lead users to fake Claude installers that deliver ClickFix attacks. The campaign, which Push Security dubbed "Adception," routes victims through a compromised WordPress site to claude-desk-code[.]com, where a copied command secretly downloads and runs a script from lake-90[.]com. The final payload remains unknown.

Details

Scores and exploitation

Disclosure date: October 9, 2026

Affected

Vendors: Anthropic,
Google,
Microsoft

Classification

Attack type: Other
Attack sophistication: Moderate
Impact: Confidentiality,
Integrity
Labels: security,
industry

How this record was produced

Summaries, mitigations and labels on this page are generated automatically from the source. The linked source is authoritative.

Original source: https://www.bleepingcomputer.com/news/security/hackers-abuse-google-ads-bing-redirects-to-push-claude-clickfix-attacks/

First tracked: October 9, 2026 at 08:00 PM ET, from BleepingComputer

Classifier: claude-haiku-5-5, prompt v4

Classifier confidence: 70% (self-assessed)

Corrections

2026-10-10: Severity changed from high to medium. Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report.

All corrections

Summary

Related items

Summary

Related items