THE article discusses the discovery of malicious webpages impersonating a program called "Claude" that are distributing the ACR Stealer malware. These pages are often found through malicious ads on Google and disguise themselves as legitimate download sites. The article includes specific URLs associated with the malware, along with SHA256 hashes and details about the files involved, such as their types and sizes. The author warns users about these threats and provides examples of how the malware appears based on the operating system being used.
Malicious Google ads push fake Claude sites spreading ACR Stealer
CyberSIXT Evidence Panel
Source marked as original reporting
Article by CyberSIXT