{"slug": "how-attackers-hosted-a-fake-claude-download-page-on-the-claude-ai-domain", "title": "How attackers hosted a fake Claude download page on the claude.ai domain", "summary": "Attackers abused Anthropic's Claude Artifacts feature to host a fake download page on the genuine claude.ai domain, leading to malware infections. Huntress researchers disclosed that employees at at least 29 organizations were compromised over two days in July after clicking a sponsored Bing ad that redirected them to a spoofed site serving SectopRAT.", "body_md": "A threat actor abused Anthropic’s Claude Artifacts feature to funnel users toward malware, Huntress researchers have disclosed. Employees at at least 29 organizations were compromised over two days in July, after searching for the Claude desktop app and clicking a sponsored Bing ad. The ad pointed to the genuine claude.ai domain, but landed on an attacker-published public artifact, which redirected them to a spoofed download site serving SectopRAT. What are Claude Artifacts? Artifacts are a … [More ](https://www.helpnetsecurity.com/2026/07/23/anthropic-claude-artifacts-download-malware/)\n\nThe post [How attackers hosted a fake Claude download page on the claude.ai domain](https://www.helpnetsecurity.com/2026/07/23/anthropic-claude-artifacts-download-malware/) appeared first on [Help Net Security](https://www.helpnetsecurity.com).", "url": "https://wpnews.pro/news/how-attackers-hosted-a-fake-claude-download-page-on-the-claude-ai-domain", "canonical_source": "https://www.helpnetsecurity.com/2026/07/23/anthropic-claude-artifacts-download-malware/", "published_at": "2026-07-23 13:12:21+00:00", "updated_at": "2026-07-23 13:23:44.001980+00:00", "lang": "en", "topics": ["ai-safety", "ai-products"], "entities": ["Anthropic", "Claude Artifacts", "Huntress", "SectopRAT", "Bing"], "alternates": {"html": "https://wpnews.pro/news/how-attackers-hosted-a-fake-claude-download-page-on-the-claude-ai-domain", "markdown": "https://wpnews.pro/news/how-attackers-hosted-a-fake-claude-download-page-on-the-claude-ai-domain.md", "text": "https://wpnews.pro/news/how-attackers-hosted-a-fake-claude-download-page-on-the-claude-ai-domain.txt", "jsonld": "https://wpnews.pro/news/how-attackers-hosted-a-fake-claude-download-page-on-the-claude-ai-domain.jsonld"}}