#Google’s #Gemini blocked billions of bad ads. That’s good news — but not enough

https://adguard.com/en/blog/google-report-gemini-blocked-billions-bad-ads.html

#advertising #malvertising #privacy #cybersecurity #AI

Hackers abuse #Google ads, #ClaudeAI chats to push #Mac #malware

https://www.bleepingcomputer.com/news/security/hackers-abuse-google-ads-claudeai-chats-to-push-mac-malware/

#cybersecurity #AI #Claude #advertising #malvertising

Donuts and Beagles: Fake Claude site spreads backdoor

A fraudulent website impersonating Anthropic's Claude AI platform has been distributing a previously undocumented backdoor called Beagle through malvertising campaigns. The attack begins when victims download a fictitious tool named Claude-Pro Relay from claude-pro[.]com, delivered as a 505 MB ZIP archive. The infection chain utilizes DLL sideloading, exploiting a signed G DATA antivirus updater to load malicious code. The technique mirrors PlugX delivery methods but deploys different payloads. Beagle supports eight commands including shell execution, file transfer, and directory listing, communicating with C2 servers using AES encryption. Related samples dating to February 2026 have been identified, with some variants delivering AdaptixC2 framework. Additional domains impersonated security vendors like Trellix, CrowdStrike, and SentinelOne. The infrastructure spans Cloudflare for distribution and Alibaba Cloud for command and control.

Pulse ID: 69fcc63f1dce161fc2f8380c
Pulse Link: https://otx.alienvault.com/pulse/69fcc63f1dce161fc2f8380c
Pulse Author: AlienVault
Created: 2026-05-07 17:05:03

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#BackDoor #Cloud #CrowdStrike #CyberSecurity #Encryption #InfoSec #Malvertising #OTX #OpenThreatExchange #PlugX #SentinelOne #SideLoading #Trellix #ZIP #bot #AlienVault

Hackers are abusing the popularity of AI tools with a fake #ClaudeAI website that spreads a newly discovered backdoor called #Beagle. The campaign uses DLL sideloading, #malvertising, and trusted signed files to infect Windows systems.

Read: https://hackread.com/hackers-fake-claude-ai-site-infect-beagle-malware/

#Cybersecurity #Malware #ClaudeAI #ArtificialIntelligence

Hackers abuse #Google ads for #GoDaddy #ManageWP login #phishing

https://www.bleepingcomputer.com/news/security/hackers-abuse-google-ads-for-godaddy-managewp-login-phishing/

#cybersecurity #advertising #malvertising

Malicious Site Exploits AI Interest to Deploy Beagle Backdoor

Beware of a fake website masquerading as Anthropic's Claude interface, tricking users into downloading a 505 MB ZIP archive that unleashes a new, previously undocumented Windows backdoor called Beagle. This malicious campaign uses a convincing imitation of the legitimate site to spread the infection.

https://osintsights.com/malicious-site-exploits-ai-interest-to-deploy-beagle-backdoor?utm_source=mastodon&utm_medium=social

#BeagleBackdoor #AiMalware #WindowsMalware #Malvertising #DllSideloading

#malware #malvertising #Google #OpenSource

'Security researchers at the [ISC] report that clicking the first Google search result for 'Homebrew' installs an infostealer that can bypass Apple security features and steal sensitive information from Mac users.'

https://www.makeuseof.com/how-one-fake-google-ad-can-silently-steal-your-macs-passwords/

MakeUseOf: Homebrew users are accidentally downloading malware instead of the real app. “A malicious Google ad campaign is targeting users of a popular free, open-source software package manager for macOS and Linux that simplifies installing, updating, and managing command-line tools. Your password and personal data could be at serious risk.”