GoKawiilFake Claude installer ads abuse Bing redirects to evade Google Ads security checks
Push Security reports that a malvertising campaign is routing Google search ads through Bing's trusted click-tracking domain before funneling victims through a hacked WordPress site to a fake Claude download page. The scheme, found after a malicious ad surfaced for searches like "claude mac," uses layered cloaking checks to hide the malicious payload from scanners and direct visitors, ultimately pushing macOS users toward ClickFix-style attacks that trick them into running malicious commands.