Will fake Claude malware campaign via Bing ads infect 100+ victims by end of 2026?

A malvertising campaign on Bing is promoting a counterfeit Claude desktop app installer that delivers SectopRAT malware. The fake installer is hosted on a legitimate Claude.ai domain variant, exploiting trust in Anthropic branding (reported by Bleeping Computer).

Resolution Criteria

Security vendors (CrowdStrike, Mandiant, Kaspersky) confirm via public threat intelligence or incident reports documenting 100+ infection events; CISA advisory; or Anthropic official statement confirming attack campaign scope by Dec 31, 2026.