Fake Claude Code Installation Command Steals Developer Credentials and Crypto Wallets
Tue Jul 28 2026
Advertising
Cryptocurrency
Cybercrime
Malware
cyberpress.org
A malicious Google ad campaign is targeting macOS users searching for “how to install Claude Code on Mac,” using a convincing Claude-branded installation guide to deliver MacSync infostealer malware. The campaign steals developer credentials, browser sessions, SSH keys, cloud tokens, and cryptocurrency-wallet data. The attack does not exploit Anthropic systems or a software vulnerability. Instead, […]
The post Fake Claude Code Installation Command Steals Developer Credentials and Crypto Wallets appeared first on Cyber Security News.