Search ads can be slick enough to feel routine, which is exactly why this latest fake AI download campaign is so nasty. A sponsored result for Claude can look harmless at first glance, even when it quietly routes people through legit-looking services and lands them on a fraudulent Mac installer page. The trap is built to feel ordinary, and that’s what makes it dangerous.
Security researchers at Push Security say the scheme leans on a chain of redirects that starts with Google advertising and passes through Bing-related tracking before reaching the fake download. That path gives the whole setup a false sense of credibility, since the destination appears to come from familiar names instead of some obvious sketchy corner of the web. The researchers gave the technique a nickname, “Adception,” because the deception is layered and intentional.
What makes the campaign stand out is the amount of effort spent on camouflage. The fake Claude page can behave differently depending on where a visitor came from, which means direct visits may show a dead end while targeted traffic gets the real bait. That kind of cloaking keeps curious users, scanners, and security tools from seeing the same thing the victim sees.
The fake installer itself is designed to mess with trust. It shows a command that looks like a normal Claude install step, the kind of thing a Mac user might not question if the page looks polished enough. But when the Copy button is used, a different command gets sent to the clipboard, and that hidden version points to an attacker-controlled location instead of Anthropic.
From there, the danger gets more serious fast. The substituted command uses Base64 encoding to bury the real destination, then pulls down a remote script and feeds it into the Mac’s Z shell for execution. On screen, the user may see reassuring language about Claude, while the machine is actually running code from somewhere else entirely.
This is the kind of scam that works because it asks the victim to do the risky part willingly. It falls into the broader InstallFix style of attack, which is closely related to ClickFix, where people are nudged into pasting malicious commands themselves under the belief they are fixing something or installing legitimate software. Once that habit kicks in, the attacker barely has to lift a finger.
Push Security said it found several other sites tied to the same toolkit, with matching installation prompts and similar fake download pages. That matters because it suggests this is not a one-off prank, but a reusable playbook that can be swapped out and aimed at different targets. The bigger pattern is what should make people uneasy, not just one bad page.
Google says it has suspended the advertiser accounts tied to the campaign, and it described malware delivery through ads as a clear violation of its policies. Microsoft also said its protections detect and block the malicious indicators described in the research. Anthropic did not respond before the deadline, but the fake page’s whole point was to borrow the company’s name and ride on its credibility.
The safest move is still the simplest one. Skip the search ad and go straight to the developer’s official site when downloading software, especially anything pretending to be an AI assistant or a must-have productivity tool. If a page wants a Mac user to paste something into Terminal, that should set off alarms immediately.
It also helps to slow down and inspect what a copy button actually does. A page can show one command while placing another on the clipboard, which means a quick visual glance is not enough. Pasting suspicious text into a plain editor first can expose weird web addresses, encoded chunks, or hidden download commands before they get a chance to run.
Mac users should keep system updates current and use strong security software that watches for malicious scripts, suspicious downloads, and odd system changes. That won’t make every threat disappear, but it raises the odds of catching a bad move early. Sponsored results deserve extra skepticism too, because paid placement does not equal safety, no matter how polished the ad looks.
If a suspicious command was already run, the machine should be treated like it may be compromised. Disconnecting from the internet, scanning with security software, checking login items and permissions, and resetting important passwords from another device are all smart next steps. A fake download page can look tidy and professional, but the aftermath can get ugly in a hurry.
