Push Security reports October 9 that it detected a malicious Google search ad for "claude mac" that routed visitors through a Bing search-result redirect, a compromised retail website and a fake Claude installer page. The company calls the technique Adception. This is a security researcher's account of a detected campaign, not an announcement that Anthropic's official download service was breached.
The sponsored result displayed bing.com as its domain, according to Push. A trusted-looking intermediate domain did not establish that the final destination was safe. The described chain used a legitimate search-result redirect for a page the attacker had compromised.
The researchers describe two layers of cloaking. The compromised site checked the incoming referrer and browser headers before forwarding visitors, and the fake installer checked whether visitors arrived through Google or Bing. Direct visits could therefore show a not-found page rather than the attack, making a simple direct link check incomplete.
The fake page displayed what looked like a legitimate Claude installation command, but its copy button substituted a different command into the clipboard. Push says the substituted command downloaded and executed a script from an attacker-controlled location. The reporting does not make an unfamiliar copied command safe merely because the visible page shows a recognized software name.
BleepingComputer's October 9 report says the final payload was unknown, so the article does not establish which malware, if any, was ultimately installed. The underlying researchers' observation and the secondary report should not be treated as two independent discoveries. The campaign's prevalence and total victim count are not established here.
Limits: this report concerns a fake installer and a particular redirect pattern, not all Google ads, Bing results or Claude downloads. We have not visited the attacker destinations or reproduced the execution chain. Users looking for software should use the publisher's own download route and examine the actual pasted text rather than trusting the page's displayed command or a familiar intermediate domain.