Bing Ad Scam Deploys Dangerous SectopRAT Malware Via Fraudulent Claude AI Installers

DNI SUMMARY — KEY POINTS

• A sophisticated malvertising campaign exploited sponsored Bing search results to distribute a counterfeit desktop version of the popular Claude AI assistant tool.
• Cybersecurity firm Huntress identified that at least 29 distinct organizations were compromised by the malicious software between July 21 and July 22.
• The attackers leveraged a malicious Artifact hosted on the legitimate Claude.ai domain to redirect unsuspecting users toward a dangerous executable file named ClaudeDesktop.exe.
• Once executed, the malware utilizes the SectopRAT trojan to gain remote access to infected systems while simultaneously harvesting sensitive financial and personal data.
• Security experts warn that the campaign employs advanced anti-analysis techniques such as virtual machine detection and GPU checks to evade standard security software.

A targeted malvertising campaign has successfully exploited Microsoft Bing advertisements to infect dozens of organizations with the intrusive SectopRAT remote access trojan. By masquerading as an official desktop installer for the popular artificial intelligence tool Claude, attackers lured users into downloading malicious software that compromises local systems. Managed security firm Huntress discovered that the operation specifically used sponsored search results to gain trust, ultimately allowing the attackers to establish unauthorized remote control over a significant number of corporate environments within a very narrow forty-eight-hour window.

Exploiting Trusted Search Platforms

The technical execution of this attack relied on a clever abuse of legitimate infrastructure to bypass standard trust filters and user skepticism. By creating a malicious Claude Artifact hosted directly on the authentic Claude.ai domain, the threat actors successfully redirected traffic to their own infrastructure. This technique proved highly effective, resulting in over 7,000 downloads of the fraudulent installer before the hosting platform intervened. This strategy highlights the persistent threat posed by attackers who leverage high-reputation domains to mask their malicious intent from both users and automated security systems.

Once the victim executes the fake file, the malware functions through a sophisticated sideloading process involving a legitimate JetBrains Chromium component. The installer uses this trusted component to load a compromised dynamic-link library that triggers the installation of the trojan. To ensure long-term presence on the target machine, the malware also deploys a file disguised as a legitimate background service. This allows the attackers to maintain persistence through scheduled tasks, even after a system reboot or basic user intervention attempts, complicating the remediation process for the affected organizations.

Technical Complexity of Delivery

Security researchers have observed that this iteration of the trojan incorporates several advanced anti-analysis features designed to thwart forensic investigation and automated sandboxing. The malware actively checks for the presence of virtual machine environments and performs GPU and VRAM hardware analysis to determine if it is being studied by security professionals. By using techniques like VMProtect packing and shader timing checks, the malicious code effectively blinds traditional endpoint detection and response tools, making it significantly harder for IT departments to identify the initial point of infection within their networks.

The core payload, known as SectopRAT or ArechClient2, provides attackers with extensive capabilities for data theft and real-time system interaction. Once active, the malware scans for sensitive information including stored browser credentials, session cookies, and financial data related to banking and credit card accounts. It further targets high-value information from popular communication platforms like Discord and Telegram, as well as gaming and professional VPN software. This depth of exfiltration capability makes the trojan a significant liability for any organization that maintains sensitive digital assets on its internal systems.

Real Time System Manipulation

A key feature of this specific threat is its implementation of Hidden Virtual Network Computing, which allows the attackers to operate the infected machine remotely as if they were sitting at the keyboard. This interaction happens in the background, often without the user noticing any anomalous activity or performance degradation on their workstation. By bypassing the need for traditional remote desktop protocols, the attackers can maintain a low profile while they navigate the victim's filesystem, exfiltrate data, or deploy secondary payloads to deepen their foothold in the network.

The campaign serves as a stark reminder of the evolving nature of trust-based attacks in the digital era, where even top-tier search engines can become vectors for distribution. While Anthropic and Microsoft work to mitigate the impact of such campaigns, the reliance on sponsored search results remains a significant vulnerability for enterprises. Users are urged to exercise extreme caution when downloading software from any advertisement, regardless of the apparent legitimacy of the domain or the quality of the branding presented in the search interface.

Strengthening Enterprise Defense Posture

Looking forward, organizations must adopt a more proactive posture to protect against these sophisticated delivery mechanisms that hide behind legitimate corporate digital presence. The use of robust endpoint protection solutions, strict application whitelisting, and continuous monitoring for anomalous network activity is more critical than ever to counter these types of malvertising operations. As threat actors continue to innovate with techniques like domain abuse and advanced obfuscation, the burden of security falls heavily on both the service providers maintaining these platforms and the end-users who must remain vigilant against unseen threats.