GoPlus: Beware of Google Search Clade Code top results/ads as malicious installers

According to the security alert released by GoPlus, attackers are using Google search ads to deploy malware that is a pixel-perfect clone of the official #Claude Code installation page. This malware steals user passwords, cookies, session tokens, crypto wallets, credentials, and system information.

GoPlus recommends identifying the ad labels in search results, carefully checking the subtle differences in URLs compared to the official website; verifying installation methods through multiple channels such as official documentation, social media, or GitHub repositories; not executing unfamiliar commands directly and analyzing command behavior before running; and installing security plugins to intercept phishing links, risky signatures, authorizations, and transactions in real-time.