Fake Claude Code site served trojan — detected by Windows Defender as Trojan:Win32/Kepavll!rfn
A Reddit user on r/ClaudeAI reported that the first Google search result for "Claude Code" was a fake website with the exact same design language as the official Anthropic site. After downloading and running a PowerShell install command, Windows Defender caught the payload as Trojan:Win32/Kepavll!rfn.
What happened
- The user, who has been online since 1996 and works mostly on macOS, needed to use Claude Code on a rarely used Windows PC.
- Clicked the first Google result for "Claude Code" — the site looked identical to the official one.
- Ran the PowerShell install command (similar to the legitimate
iex (irm <url>)pattern) without verifying the URL. - Windows Defender immediately flagged the download as
Trojan:Win32/Kepavll!rfn.
How to avoid this
- Always check the domain: official Claude Code downloads are on
docs.anthropic.comor the official GitHub repository, not a lookalike. - For Windows, use
winget install ClaudeCodeor download the MSI directly from the official source. - Never run
iex (irm ...)from a search result — manually verify the URL before pasting into PowerShell.
📖 Read the full source: r/ClaudeAI
👀 See Also
llm-hasher: Local PII Detection and Tokenization for Hybrid LLM Workflows
llm-hasher is a tool that detects personally identifiable information locally using Ollama before data reaches external LLMs like OpenAI or Claude, tokenizes the PII, and restores originals after processing. It uses regex for structured data types and a local LLM for contextual detection, with encrypted storage for mappings.
AI System Discovers 12 OpenSSL Zero-Days, Curl Cancels Bug Bounty Due to AI Spam
AISLE's AI system discovered all 12 zero-day vulnerabilities in OpenSSL's recent security release, marking the first large-scale demonstration of AI-based cybersecurity. Meanwhile, curl cancelled its bug bounty program due to AI-generated spam submissions.
Privacy Concerns in OpenClaw: Skills, SOUL MD, and Agent Communication
A developer raises privacy concerns about OpenClaw's architecture, specifically around skills having unrestricted access to sensitive data, SOUL MD being writable, and agents sharing information without filters.
Rules of the Claw: Open Source Security Rule Set for OpenClaw Agents
An open source JSON rule set with 139 security rules that blocks destructive commands, protects credential files, and guards instruction files from unauthorized agent edits. It operates with zero LLM dependency using regex patterns at the tool layer.