Apr 13, 2026 • Ionut Arghire
Fake Claude Website Distributes PlugX RAT
Security researchers have identified a fake Claude website distributing the PlugX RAT (Remote Access Trojan). The malicious campaign mimics the legitimate...
Executive Summary
Security researchers have identified a fake Claude website distributing the PlugX RAT (Remote Access Trojan). The malicious campaign mimics the legitimate Anthropic Claude installation to deceive users. The malware employs DLL sideloading techniques to execute malicious code within a trusted process, making detection more difficult. Additionally, the malware includes self-cleanup functionality to remove traces after execution. Users should verify website URLs before downloading software and ensure they are using official Anthropic sources. Organizations should implement robust endpoint detection, monitor for DLL sideloading patterns, and educate users about the risks of downloading software from unofficial sources.
Summary
The malware mimics the legitimate Anthropic installation, relies on DLL sideloading, and cleans up after itself. The post Fake Claude Website Distributes PlugX RAT appeared first on SecurityWeek .
Published Analysis
Security researchers have identified a fake Claude website distributing the PlugX RAT (Remote Access Trojan). The malicious campaign mimics the legitimate Anthropic Claude installation to deceive users. The malware employs DLL sideloading techniques to execute malicious code within a trusted process, making detection more difficult. Additionally, the malware includes self-cleanup functionality to remove traces after execution. Users should verify website URLs before downloading software and ensure they are using official Anthropic sources. Organizations should implement robust endpoint detection, monitor for DLL sideloading patterns, and educate users about the risks of downloading software from unofficial sources. The malware mimics the legitimate Anthropic installation, relies on DLL sideloading, and cleans up after itself. The post Fake Claude Website Distributes PlugX RAT appeared first on SecurityWeek . The malware mimics the legitimate Anthropic installation, relies on DLL sideloading, and cleans up after itself. The post Fake Claude Website Distributes PlugX RAT appeared first on SecurityWeek .
Linked Entities
- PlugX RAT