GoPlus: Beware that Google Search Clade Code top results/ads are malicious installers

ZkProver · 2026-03-11T06:11:23+00:00

GoPlus warns that attackers are using Google search ads to distribute malware, clone the official Claude Code installation page, and steal user information. Users are advised to carefully verify search ads, confirm the installation method, and install security plugins to prevent phishing links.

ZkProver

2026-03-11 06:11:23

Abstract generation in progress

ChainCatcher reports that, according to a security alert from GoPlus, attackers are using Google search ads to distribute malware that perfectly clones the official #Claude Code installation page at a pixel level. This malware steals user passwords, cookies, session tokens, crypto wallets, credentials, and system information.

GoPlus recommends identifying ad labels in search results, carefully verifying URL differences from the official website; confirming installation methods through official documentation, social media, or GitHub repositories; avoiding executing unfamiliar commands directly and analyzing command behavior before running; installing security plugins to intercept phishing links, risk signatures, authorizations, and transactions in real time.

View Original

This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.