Attackers are using fake Claude Code install pages and malicious search ads to spread infostealer malware targeting Windows ...

Dubbed InstallFix by Push Security, the scheme inserts instructions to download malware during the Claude Code install process on cloned websites.

Threat actors are employing a new variation of the ClickFix social engineering technique called InstallFix to convince users ...

Security researchers at Push Security have discovered a new technique they call InstallFix. Attackers clone installation ...

InstallFix delivers an infostealer to your device.

The cyberattacks blend malvertising with a ClickFix-style technique that highlights risky behavior with AI coding assistants and command-line interfaces.