PCMag on MSN

Phony Claude code install guides trick Vibe coders into installing malware

Dubbed InstallFix by Push Security, the scheme inserts instructions to download malware during the Claude Code install process on cloned websites.
MUO on MSN

Hackers are disguising malware as Claude Code, and it's easy to fall for the scam

Be careful what links you follow ...

This Scam Impersonates the Official Claude Code Website to Spread Malware

InstallFix delivers an infostealer to your device.

Fake AI Developer Tools Are Distributing Amatera and AMOS Malware

Hackers are using malvertising campaigns to disguise infostealers as AI tools.
Bleeping Computer

Fake Claude Code install guides push infostealers in InstallFix attacks

Threat actors are employing a new variation of the ClickFix social engineering technique called InstallFix to convince users into running malicious commands under the pretext of installing legitimate ...
WinBuzzer

Fake Claude Code Pages Spread Malware to Developers via Google Ads

A malvertising campaign has spread fake Claude Code install pages through Google Ads, delivering the Amatera infostealer to ...

Fake Claude Code Spreads Malware to Windows, macOS Users

Attackers are using fake Claude Code install pages and malicious search ads to spread infostealer malware targeting Windows ...
Nigeria Communications Week on MSN

Kaspersky Discovers Infostealers Mimicking Claude Code, OpenClaw and Other AI Developer Tools

In March 2026, Kaspersky Threat Research has identified a new malicious campaign targeted at developers looking for installation instructions for Claude Code, a development agent created by Anthropic.