// ClaudeMEDIUM
Sophos X-Ops researchers documented an active malvertising campaign distributing a previously undocumented Windows backdoor named Beagle through a fake Claude AI website. The malicious domain claude-procom impersonates Anthropic's Claude interface using similar branding and colors to trick visitors into downloading the implant. Users searching for Claude who click sponsored or promoted links risk infection with the Beagle backdoor on Windows systems. The campaign is a brand-impersonation supply path rather than a flaw in Anthropic's own service, but it targets Claude users directly. Defenders should block the impersonating domain and steer users to claude.ai through verified channels.
// Get alerts for Claude