Fake Claude site installs malware that gives attackers access to your computer

Malwarebytes Labs cybersecurity · April 10, 2026 · Original source

We found a convincing fake site that installs a trojanized Claude app while quietly deploying PlugX malware.

Related Vulnerabilities

CVE-2026-23781: An issue was discovered in BMC Control-M/MFT 9.0.20 through 9.0.22. A set of default debug user cred CRITICAL
CVE-2026-2712: The WP-Optimize plugin for WordPress is vulnerable to unauthorized access of functionality due to mi MEDIUM
CVE-2026-35621: OpenClaw before 2026.3.24 contains a privilege escalation vulnerability where the /allowlist command HIGH
CVE-2026-35652: OpenClaw before 2026.3.22 contains an authorization bypass vulnerability in interactive callback dis MEDIUM
CVE-2026-3691: OpenClaw Client PKCE Verifier Information Disclosure Vulnerability. This vulnerability allows remote MEDIUM