Fake Claude site installs malware that gives attackers access to your computer

Malwarebytes Labs cybersecurity · April 10, 2026 · Original source

We found a convincing fake site that installs a trojanized Claude app while quietly deploying PlugX malware.

Related Vulnerabilities

CVE-2026-40217: LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting HIGH
CVE-2026-5777: This vulnerability exists in the Atom 3x Projector due to improper exposure of the Android Debug Bri HIGH
CVE-2026-40151: PraisonAI is a multi-agent teams system. Prior to 4.5.128, the AgentOS deployment platform exposes a MEDIUM
CVE-2026-35669: OpenClaw before 2026.3.25 contains a privilege escalation vulnerability in gateway-authenticated plu HIGH
CVE-2026-34483: Improper Encoding or Escaping of Output vulnerability in the JsonAccessLogValve component of Apache MEDIUM