Fake Claude Desktop App on Bing Ads Is Dropping SectopRAT — Act Now

Active Malvertising Campaign Is Targeting Claude AI Users

A malvertising campaign currently running on Bing is serving a convincing fake Claude desktop app installer that drops SectopRAT (also tracked as Arechclient2) — a fully featured remote access trojan — on any machine that runs it.

The mechanics are straightforward: threat actors purchase Bing ads targeting searches for "Claude" or "Claude AI download." The sponsored result appears above organic listings, links to a domain mimicking Claude's branding, and serves what looks like a legitimate installer. Run it and you've handed an attacker persistent remote access to your workstation. What makes this campaign particularly dangerous is that the malicious installer was reportedly hosted on infrastructure convincingly tied to the real Claude.ai domain — not an obvious typosquat that a careful eye would catch.

Why This Is Dangerous Right Now

Technical professionals — developers, sysadmins, security researchers — are exactly the population searching Bing for AI tools. There is no official Claude desktop app for Windows distributed through ad channels, which means demand for one is genuine and the social engineering surface is wide.

SectopRAT is not a simple info-stealer. It's a .NET-based RAT with capabilities including:

• Credential harvesting from browsers (cookies, saved passwords, autofill data)
• Cryptocurrency wallet exfiltration
• Desktop and secondary screen capture
• Reverse proxy functionality to tunnel traffic through the victim's machine
• Persistence via scheduled tasks or registry run keys

On a machine with access to cloud consoles, internal tooling, secrets stores, or code repositories, the blast radius extends far beyond the workstation itself. A single compromised developer laptop can mean exposed API keys, production credentials, and VPN access.

What to Do Right Now

If you or anyone on your team recently downloaded "Claude" via a Bing search result:

1. Treat the machine as compromised immediately. Isolate it from the network before doing anything else.
2. Revoke exposed credentials — browser-saved passwords, API keys, SSH keys stored on disk, and any cloud console sessions. Rotate everything the machine had access to.
3. Invalidate active browser sessions for SaaS tools; SectopRAT can steal cookies that bypass password-based auth.
4. Hunt for persistence artifacts: check HKCU\Software\Microsoft\Windows\CurrentVersion\Run, HKLM\...\Run, and Task Scheduler for anything unfamiliar added in the last few days.
5. Pull SectopRAT IOCs from the BleepingComputer writeup and feed them into your SIEM or EDR query immediately.

Preventive steps for your team:

• Block or alert on Bing ad click-throughs to AI tool domains at the DNS or proxy layer. This class of malvertising is now a standard playbook — budget for it.
• Communicate clearly: the only way to access Claude is through claude.ai in a browser or Anthropic's officially distributed desktop apps. No legitimate Bing-sponsored link leads to an installer.
• Enforce a no-unreviewed-installer policy on managed endpoints. This one runs fine without elevation on many configurations.

The recently released official Claude desktop app has given this campaign fresh legitimacy — users reasonably expect a downloadable client to exist. Expect similar campaigns targeting other AI tools as the category grows. The pattern is now well-established.