[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fMrd9QFMGxfmbqi5Z232qmSfTyQ4RhZjQpnrbgEFSI0A":3},{"article":4,"iocs":31,"watch_terms":35},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":10,"entities":15,"category_id":16,"category":17,"article_tags":20},"ddd5adc1-36ee-4b89-a590-96da25f173ca","'InstallFix' Attacks Spread Fake Claude Code Sites","installfix-attacks-spread-fake-claude-code-sites","A fresh cyberattack campaign blends malvertising with a ClickFix-style technique that highlights risky behavior with AI coding assistants and command-line interfaces.","A cyberattack campaign called 'InstallFix' combines malvertising with ClickFix social engineering to distribute fake Claude AI code sites. The campaign exploits user interactions with AI coding assistants and command-line interfaces to deceive victims into installing malware.",null,"https:\u002F\u002Fwww.darkreading.com\u002Fcloud-security\u002Finstallfix-attacks-fake-claude-code","https:\u002F\u002Feu-images.contentstack.com\u002Fv3\u002Fassets\u002Fblt6d90778a997de1cd\u002Fblt9ef0393a6c2b5267\u002F69af1dcdda78b900084831b6\u002Fclaude_RalfLiebhold_Alamy.jpg?width=1280&auto=webp&quality=80&disable=upscale","2026-03-09T20:42:25+00:00","2026-03-14T09:41:10.370894+00:00",[],"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":16,"icon":10,"name":18,"slug":19},"Malware","malware",[21,26],{"category":22},{"id":23,"icon":10,"name":24,"slug":25},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":27},{"id":28,"icon":10,"name":29,"slug":30},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[32],{"type":19,"value":33,"context":34},"InstallFix","Malware campaign combining malvertising and ClickFix techniques targeting AI coding assistant users",[]]