Key Takeaways
- 'Adception' scam uses Google Ads and Bing redirects to deliver fake Claude AI installers to Mac users.
- Attackers employ 'cloaking' to hide malicious content from security scanners.
- Fake download pages secretly substitute a malicious, encoded Terminal command for a legitimate-looking one.
- Executing this hidden command can lead to remote code execution and Mac compromise.
- Always download software from official sources and verify Terminal commands before running them.
Mac users are facing a sophisticated cyberattack dubbed 'Adception,' exploiting trusted search engine advertising and redirects to deliver malicious software. Researchers at Push Security uncovered this scheme, where a Google search for Claude AI leads victims through a treacherous path, culminating in dangerous command execution on macOS devices.
The attack's ingenuity lies in its multi-layered deception. A sponsored Google ad for "Claude Mac\