According to Malwarebytes, the malicious file contains an MSI installer that mimics the legitimate Anthropic installation chain and installs the real Claude application.

Claude’s rapid growth—nearly 290 million web visits per month—has made it an attractive target for attackers, and this ...

A website posing as a legitimate Anthropic Claude domain was caught serving a remote access trojan to its visitors, Malwarebytes reports. Relying on Claude’s popularity, a threat actor created a site ...

A remote access Trojan that's a staple of Chinese nation-state hacking is part of an ongoing campaign targeting telecom and manufacturing sectors in Central and South Asian countries. See Also: ...

TA416 targeted European governments from mid-2025 using PlugX and OAuth abuse, enabling cyber espionage against EU and NATO ...

In a nutshell: The Justice Department and the FBI recently announced a multi-month operation that took down a variant of the PlugX family of malware. The malicious tool was developed by a hacking team ...