The fake download flow induces execution by copying an attacker-selected command and instructing the visitor to run it with Windows tools. In the reported sandbox sequence, mshta retrieves a stage that leads to PowerShell execution. The malicious payload is not a natural-language response produced by Claude; it is conventional local code reached through a…
Inspect the ClaimsCase · DiggingBeagle record
Fake Claude download ads use clipboard and Windows native loaders
A separate imitation-download campaign copies install commands to the clipboard and steers visitors into Windows Run/PowerShell, using mshta and PowerShell stages.
Scope
Browser ad or fake download page to local execution
Assessment profile
Assessment method- Setting
- research demonstration
- Exploitation
- demonstrated
- AI role
- AGAINST AI
Basis and provenance
Assessment is limited to the selected canonical Claims and their Source locators in knowledge revision 152. Primary public URL retrieval was unavailable during this drafting pass, and the pinned index reports incomplete linked-record coverage without identifying missing IDs. No independent production impact, generalized exploit prevalence, or attributable victim count is inferred. Case setting is research_demonstration; evidence status records only the documented source-reported result, not external replication.
Assessed Oct 15, 2026 using diggingbeagle.assessment/1.
Evidence basis: CLM-2026-FAKE-CLAUDE-CLICKFIX-01 · ANY.RUN: counterfeit AI products and malicious onboarding campaigns
At a glance
Neither analysis volume nor ad-click counts demonstrate successful infections for that many people.
Limits and uncertaintyFull account
The fake download flow induces execution by copying an attacker-selected command and instructing the visitor to run it with Windows tools. In the reported sandbox sequence, mshta retrieves a stage that leads to PowerShell execution. The malicious payload is not a natural-language response produced by Claude; it is conventional local code reached through a deceptive AI-brand landing page.
ANY.RUN counted 220 public analyses of this cluster. Analysis volume cannot establish the number of people who executed the command or the number of successful installations. This chain is separate from both the browser-in-browser Google credential lure and the counterfeit terminal documentation cluster, even though each uses AI-product credibility.
Claims & evidence
CLM-2026-FAKE-CLAUDE-CLICKFIX-01ANY.RUN reports 220 sandbox analyses of fake Claude-style download pages; in tested sequences, a clipboard command led from mshta to a staged PowerShell payload.supported
Basis: reported finding
- supportsANY.RUN: counterfeit AI products and malicious onboarding campaignsprimary disclosure
Section The Download Page That Asks for PowerShell
Unknowns and contradictions
- Neither analysis volume nor ad-click counts demonstrate successful infections for that many people.
Sources and citation
Material revision history
- Oct 15, 2026 · Canonical change recorded · new in release · revision 153