Claude Code Install Phishing Site Tops Google Search Results
A Reddit user on r/ClaudeAI reports that searching Google for "Claude code install mac" returns a phishing site as the top result, masquerading as the official Claude Code download page. The fake page is designed to trick developers into downloading malware or stealing credentials.
What's Happening
- The phishing site appears as the first Google result for the search term "Claude code install mac".
- It mimics the official Anthropic/Claude branding and UI to appear legitimate.
- Users who download software from the fake site risk installing malicious payloads or exposing sensitive data.
How to Stay Safe
Always verify the domain before downloading Claude Code. The only official source is https://docs.anthropic.com/en/docs/claude-code/overview or directly from Anthropic's verified distribution channels. Check the URL carefully — phishing sites often use slight misspellings or different TLDs.
Who Is Affected
Developers on macOS searching for Claude Code installation instructions are the primary target. The attack exploits trust in search engine rankings.
📖 Read the full source: r/ClaudeAI
👀 See Also
Claude AI guardrail bypass observed when framing requests as network security tasks
A Reddit user discovered that Claude AI provides piracy domain lists when requests are framed as network security tasks for blocking, bypassing normal refusal mechanisms. The model acknowledged misinterpreting intent after the user pointed out the framing influence.
Agent Hush: Open-source tool prevents AI coding agents from leaking sensitive data
Agent Hush is an open-source tool that catches sensitive data before it leaves your machine, created after a developer's AI coding agent leaked API keys, server IPs, and personal info to a public GitHub repo while building a security project.
Claude implements identity verification for certain use cases
Anthropic is rolling out identity verification for Claude through Persona Identities, requiring government-issued photo IDs and live selfies. The verification process takes under five minutes and is used to prevent abuse and comply with legal obligations.
Open Source AI Tools Pose Security Risks Through 'Illusory Security Through Transparency'
A Reddit post warns about malware disguised as open-source AI agents and tools, where malicious code can be hidden in large codebases that users assume are safe because they're on GitHub. The post describes how 'vibe-coding' and autonomous AI agents condition users to run unknown programs without review.