SANS ISC
Malicious Google ads push fake Claude sites spreading ACR Stealer
The article discusses the discovery of malicious webpages impersonating a program called "Claude" that are distributing the ACR Stealer malware. These pages are often found through malicious ads on Google and disguise themselves as legitimate download sites. The article includes specific URLs associated with the malware, along with SHA256 hashes and details about the files involved, such as their types and sizes. The author warns users about these threats and provides examples of how the malware appears based on the operating system being used.