A malicious Claude artifact ran as a Google ad for install docs

The page was hosted on Anthropic’s own domain and was reached through Google. Security vendors that documented the campaign attribute the placement to paid search: Huntress records the victim arriving “after clicking on a sponsored search result in Google,” which makes this malvertising through advertiser accounts rather than a page that climbed the organic rankings.

What the user reports

On August 20, 2026 a Reddit user on r/ClaudeAI wrote that he searched for installation instructions and opened a result that looked exactly like official documentation.

It was a published Claude artifact, a user-made page that lives on the company’s legitimate domain. The page walked through a familiar copy-paste terminal command. Running it installed an infostealer with persistent launch agents on his Mac, and he ended up wiping the disk.

In his words: “No one has their guard up all the time. Sure it was preventable but if it got me it will get other people as well.”

The status of this account matters. It is one user’s report with screenshots, not a confirmed incident statement from Anthropic.

The structural problem

Any platform that publishes user-generated pages on its main domain hands attackers a trusted URL. Scammers have run the same play with fake login pages hosted on Google Docs for years, and the trust does not come from the page, it comes from the hostname in front of it.

The ad channel compounds it. A sponsored slot sits above the organic results, and the destination here carried a legitimate Anthropic domain, so the two signals a careful user checks both looked correct.

The practical defense

Two habits cover most of this. If a page tells you to paste a command into your terminal, read the command before you run it, whatever domain it is on. And take installation instructions from the documented source rather than from a search result, even a search result that looks correct.

The uncomfortable part of this case is that both the domain and the layout were right. The only wrong thing was who wrote the page.