Hackers use Bing redirects in Google ads for fake Claude installers

What happened

Hackers use Bing redirects in Google ads for fake Claude installers, according to SC Media. Hackers are employing a sophisticated technique called "Adception" to distribute malware (software written to damage a system or steal from it) by abusing legitimate Bing search-result redirects within Google search ads. Application security , Phishing Hackers use Bing redirects in Google ads for fake Claude installers October 11, 2026 Share By SC Staff As reported by Bleeping Computer, hackers are employing a sophisticated technique called "Adception" to distribute malware by abusing legitimate Bing search-result redirects within Google search ads. Google is a software and Internet company based in Mountain View, and its products and services include Google Search and Software tools.

This method aims to trick users into downloading fake Claude installers that ultimately deliver ClickFix attacks. The "Adception" campaign leverages Bing's trusted domain as an initial ad destination in Google ads, making them appear less suspicious.

After a user clicks the ad, it passes through Google's redirect and then Bing's click-tracking endpoint, which forwards the browser to a compromised South American retailer's website. This site then redirects the user to a fake Claude download page, `claude-desk-code[.]com`.