Fake Claude Code Download Pages Are Delivering Infostealer Malware

As AI development tools continue to grow in popularity, attackers are beginning to exploit their ecosystems. A recent campaign is distributing fake Claude Code download pages that mimic legitimate installers. The attack relies on sponsored search advertisements, meaning developers searching for Claude Code may encounter the malicious page before the real one. If the installation command is copied and executed, the malware deploys infostealers capable of capturing: • Browser credentials • Session