Fake Claude app promoted by Bing ads pushes SectopRAT malware
A malvertising campaign on Bing search promoted a fake Claude desktop app installer hosted on a legitimate Claude.ai domain to distribute the SectopRAT malware. The malicious installer, downloaded over 7,000 times before removal, sideloads a malicious DLL to deliver SectopRAT, a remote access trojan with info-stealing and HVNC capabilities. Persistence is maintained via a scheduled task installed by another executable. The malware targets sensitive user data including passwords, credit cards, browser data, messaging clients, and VPN credentials. The campaign compromised at least 29 organizations over two days in July 2026. Researchers have not attributed the campaign to a known threat cluster. Users are advised to download software only from official sources rather than search results or ads.
AI Analysis
Technical Summary
This threat involves a malvertising campaign named FakeAgent that used Bing ads to push a fake Claude desktop app installer hosted on a legitimate Claude.ai domain. The installer is a legitimate JetBrains Chromium component that sideloads a malicious DLL (libcef.dll) to deploy SectopRAT malware, a remote access trojan with information-stealing and hidden VNC capabilities. Persistence is achieved through a scheduled task installed by DockerDesktop.exe. The malware targets a wide range of sensitive data, including passwords, credit card information, browser logins, cookies, FTP credentials, and data from messaging clients such as Discord and Telegram. The campaign compromised at least 29 organizations between July 21-22, 2026. The malware uses advanced anti-analysis techniques and retrieves command-and-control addresses via Ethereum BNB Smart Chain transactions. Researchers used Claude Opus 4.8 to assist in analysis and attribution. The campaign is not yet linked to any known threat actor. Users should avoid downloading software from search engine ads and rely on official websites.
Potential Impact
The SectopRAT malware deployed through this campaign enables attackers to remotely access and control infected systems with hidden VNC functionality, steal sensitive information including user passwords, credit card data, browser credentials, cookies, FTP credentials, and data from messaging clients and VPN products. At least 29 organizations were compromised during the campaign. The malware's persistence mechanisms and anti-analysis features increase the difficulty of detection and removal.
Mitigation Recommendations
No official patch or fix is applicable as this is a malware distribution campaign rather than a software vulnerability. The malicious installer was removed from the Claude.ai domain by the vendor. Users and organizations should avoid downloading software from search engine ads or untrusted sources and instead use official websites and verified download portals. Security teams should be aware of this campaign and monitor for indicators of SectopRAT infection. No specific vendor advisory or patch is available; remediation involves user education and endpoint detection and response measures.
Fake Claude app promoted by Bing ads pushes SectopRAT malware
Description
A malvertising campaign on Bing search promoted a fake Claude desktop app installer hosted on a legitimate Claude.ai domain to distribute the SectopRAT malware. The malicious installer, downloaded over 7,000 times before removal, sideloads a malicious DLL to deliver SectopRAT, a remote access trojan with info-stealing and HVNC capabilities. Persistence is maintained via a scheduled task installed by another executable. The malware targets sensitive user data including passwords, credit cards, browser data, messaging clients, and VPN credentials. The campaign compromised at least 29 organizations over two days in July 2026. Researchers have not attributed the campaign to a known threat cluster. Users are advised to download software only from official sources rather than search results or ads.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This threat involves a malvertising campaign named FakeAgent that used Bing ads to push a fake Claude desktop app installer hosted on a legitimate Claude.ai domain. The installer is a legitimate JetBrains Chromium component that sideloads a malicious DLL (libcef.dll) to deploy SectopRAT malware, a remote access trojan with information-stealing and hidden VNC capabilities. Persistence is achieved through a scheduled task installed by DockerDesktop.exe. The malware targets a wide range of sensitive data, including passwords, credit card information, browser logins, cookies, FTP credentials, and data from messaging clients such as Discord and Telegram. The campaign compromised at least 29 organizations between July 21-22, 2026. The malware uses advanced anti-analysis techniques and retrieves command-and-control addresses via Ethereum BNB Smart Chain transactions. Researchers used Claude Opus 4.8 to assist in analysis and attribution. The campaign is not yet linked to any known threat actor. Users should avoid downloading software from search engine ads and rely on official websites.
Potential Impact
The SectopRAT malware deployed through this campaign enables attackers to remotely access and control infected systems with hidden VNC functionality, steal sensitive information including user passwords, credit card data, browser credentials, cookies, FTP credentials, and data from messaging clients and VPN products. At least 29 organizations were compromised during the campaign. The malware's persistence mechanisms and anti-analysis features increase the difficulty of detection and removal.
Mitigation Recommendations
No official patch or fix is applicable as this is a malware distribution campaign rather than a software vulnerability. The malicious installer was removed from the Claude.ai domain by the vendor. Users and organizations should avoid downloading software from search engine ads or untrusted sources and instead use official websites and verified download portals. Security teams should be aware of this campaign and monitor for indicators of SectopRAT infection. No specific vendor advisory or patch is available; remediation involves user education and endpoint detection and response measures.
Threat ID: 6a6270e89c2644c7f89dea90
Added to database: 07/23/2026, 19:52:08 UTC
Last enriched: 07/23/2026, 19:52:22 UTC
Last updated: 07/23/2026, 20:24:39 UTC
Views: 9
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.