… Earlier this year, threat actors used Google advertisements to direct users searching for Claude downloads to shared Claude conversations containing malicious installation instructions. …
… Common users include web developers, web agencies managing client sites, and enterprises. Researchers at Guardio Labs warn that the fake result is displayed above the real one for the 'managewp' query, luring users who rely on Google to find the URL for logging into ManageWP. …
… According to the criminal complaint , throughout this scheme, Spagnuolo used his access to an internal software tool containing confidential "Year in Search" data Google's annual ranking of top trending search terms , which was marked with a "Google Confidential" banner in red text. …