March 9, 2026
InstallFix Attacks Spread Infostealers via Fake Claude Code Guides
Cybercriminals have launched a new campaign using InstallFix attacks to distribute information-stealing malware through fake Claude Code installation guides. The operation targets developers searching for instructions to install Anthropic’s Claude Code CLI. Instead of legitimate documentation, victims land on convincing clone pages that contain malicious terminal commands. Security researchers discovered that these pages replicate official documentation almost perfectly. However, the
