Hackers Are Hijacking Bing Redirects to Push Fake Claude Installers

Emily Davis · 2026-10-09

You're searching for a way to try Claude, the AI assistant everyone's talking about. You click a Google ad that looks legit. Next thing you know, you're staring at a fake installer that's actually malware. That's the new ClickFix attack, and it's spreading fast. Security researchers recently uncovered a sneaky scheme: hackers are using legitimate Bing search-result redirects as click URLs in Google search ads. So when you click the ad, you get bounced through Bing (which feels safe) and land on a page that looks like an official Claude download. But it's not. It's a trap. ### How the Attack Works The whole thing relies on trust. You trust Google ads. You trust Bing. You trust that a search result leading to a download page is probably okay. Hackers know this. They exploit that trust by chaining together two legitimate services to make their malicious link look harmless. Here's the basic flow: - You see a Google ad for "Claude AI download" or something similar. - The ad's click URL points to a Bing redirect link. - Bing redirects you to a fake Claude installer page. - The page prompts you to install a "browser update" or "plugin" to continue. - That installer is actually malware, often a ClickFix attack that hijacks your clipboard or tricks you into running malicious commands. It's clever because it bypasses some of Google's ad review systems. The ad itself doesn't contain the malicious link—it just points to Bing. And Bing redirects are everywhere, so they don't raise red flags. ### Why This Matters for Antidetect Browser Users If you're using an antidetect browser to manage multiple accounts, you're already a target. Hackers know that people in your line of work often download tools, extensions, and software from the web. They're counting on you to let your guard down. Think about it: you're juggling ten profiles, each with its own fingerprint. You need to keep them separate and secure. The last thing you want is malware that can spy on your sessions, steal cookies, or log keystrokes. A ClickFix attack can do all that and more. > "The best defense is a healthy dose of skepticism. If a download link comes through an ad, especially one that redirects, treat it like a suspicious package." ### How to Protect Yourself You don't need to be a security expert to stay safe. A few simple habits go a long way. - **Never download software from search ads.** Go directly to the official website. Type the URL yourself or use a bookmark. - **Check the domain.** If you're on a page that claims to be Claude but the URL looks weird, bail. - **Use an antidetect browser with built-in security.** The best antidetect browsers offer fingerprint protection and sometimes block malicious redirects. - **Keep your browser updated.** Security patches matter. - **Educate your team.** If you manage multiple profiles, make sure everyone knows the risks. ### The Bottom Line Hackers are always looking for new ways to exploit trust. This Bing redirect trick is just the latest example. As someone who relies on antidetect browsers, you're already thinking about privacy and security. Now it's time to extend that mindset to every link you click. Stay safe out there. And remember: if it feels too good to be true, it probably is. Especially when it comes to free AI installers.