Fake Claude site installs malware that gives attackers access to your computer

Malwarebytes Labs cybersecurity · April 10, 2026 · Original source

We found a convincing fake site that installs a trojanized Claude app while quietly deploying PlugX malware.

Related Vulnerabilities

CVE-2026-39922: GeoNode versions 4.0 before 4.4.5 and 5.0 before 5.0.2 contain a server-side request forgery vulnera N/A
CVE-2026-4149: Sonos Era 300 SMB Response Out-Of-Bounds Access Remote Code Execution Vulnerability. This vulnerabil CRITICAL
CVE-2026-35662: OpenClaw before 2026.3.22 fails to enforce controlScope restrictions on the send action, allowing le MEDIUM
CVE-2026-40252: FastGPT is an AI Agent building platform. Prior to 4.14.10.4, Broken Access Control vulnerability (I N/A
CVE-2026-5055: NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerabil HIGH