Hackers Abuse Bing Redirects and Google Ads to Distribute ClickFix Malware
Attackers are leveraging legitimate Bing search redirects within Google Ads to trick users into downloading fake Claude installers that deploy the ClickFix malware.
Key points
- Attackers use Google Ads with Bing redirect URLs to distribute malicious payloads.
- The fake installers mimic the Claude AI application to deceive victims.
- The delivered malware is identified as ClickFix, a known threat vector.
Cybercriminals are currently executing a sophisticated ad-based attack campaign that abuses legitimate Bing search-result redirects to distribute ClickFix malware. According to a report by BleepingComputer, these attackers are placing malicious click URLs within Google search advertisements to direct unsuspecting users toward fraudulent software installers.
The campaign specifically targets users searching for or clicking on ads related to the Claude AI application. Instead of landing on the official Anthropic website or a legitimate download page, victims are routed through a Bing redirect URL embedded in the Google Ad. This redirect serves as a bridge, masking the final destination until the user has already committed to the click. The ultimate destination is a website hosting fake Claude installers. Once a user downloads and executes this counterfeit installer, the ClickFix malware is deployed onto their system.
Attack Mechanics and Infrastructure
The strategy relies on the trust users place in major search engines and advertising platforms. By utilizing Google Ads, the attackers gain immediate visibility and credibility, as users often associate paid search results with legitimate businesses. The use of Bing redirects adds a layer of obfuscation. Because the intermediate URL belongs to a well-known and trusted domain (Bing), it may bypass certain basic security filters or user scrutiny that would flag a direct link to an obscure or suspicious domain.
According to BleepingComputer, the core of the attack lies in this chain of redirection. The initial click on the Google Ad triggers the Bing redirect, which then forwards the user to the malicious landing page. This multi-step process makes it more difficult for automated security tools to immediately identify the threat based solely on the initial ad URL. The final payload, ClickFix, is delivered through the guise of a legitimate AI tool installer, exploiting the growing popularity of generative AI applications to entice downloads.
Who Is Affected
This campaign primarily affects users who interact with search engine results, particularly those who click on sponsored advertisements for popular software. Individuals seeking to install or update the Claude AI application are the specific target demographic. However, the abuse of major advertising platforms means that any user browsing via Google Search could potentially encounter these malicious ads, depending on the keywords they search for and the targeting parameters set by the attackers.
Organizations that allow unrestricted access to advertising-supported search results on corporate networks may also be at risk. Employees who download software from unverified sources, even if presented via a seemingly legitimate search ad, could inadvertently introduce the ClickFix malware into the corporate environment. The use of fake installers for a widely recognized AI tool suggests that the attackers are casting a wide net, aiming for volume rather than highly targeted spear-phishing.
What should you do?
Security professionals should monitor for unusual outbound traffic involving redirect chains from major search engines to unexpected destinations. Users should be educated to verify the final destination URL before downloading any software, regardless of how the link was discovered. Organizations should consider implementing web filtering policies that inspect redirect chains for anomalies.
Background: Generative AI
Generative AI creates content from prompts. Agentic AI performs actions using tools. The former outputs text or code; the latter changes system states. Understanding this distinction is critical for security architecture, as agentic systems introduce execution risks that pure generation models do not possess.
Read the full guide: Generative AI vs Agentic AI: Architectural Differences and Security Risks
What to do and how to stay safe: ClickFix
- Verify the final destination URL by hovering over links before clicking, especially in search advertisements, to ensure they lead to official vendor domains.
- Download software only from the official vendor’s website or verified app stores, avoiding third-party installers found via search ads.
- Monitor endpoint logs for the execution of unknown installers or scripts following clicks on search engine results.
- Once the vendor provides an update, ensure all systems are patched to mitigate any newly discovered vulnerabilities exploited by similar campaigns.
Step-by-step guide: Social Engineering Warning Signs and How to Respond
General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
How are hackers distributing ClickFix malware in this campaign?
Hackers are using Google search ads that contain Bing redirect URLs, which lead users to fake Claude installers hosting the ClickFix malware.
What application are the fake installers mimicking?
The fake installers are designed to mimic the Claude AI application to deceive users into downloading the malware.
Which platforms are being abused in this attack chain?
The attack chain abuses Google Ads for initial visibility and Bing search-result redirects to mask the malicious destination.
