A little help from your search engine. [Research Saturday]
Today we are joined by Brian Hussey, SVP of Howler Cell Threat Services at Cyderes, discussing their work on "Bad Ads, Worse Binaries: Fake Claude Code Installer Drops Infostealer." Howler Cell identified an SEO poisoning campaign targeting people searching for Claude Code installation guides, using a fake Anthropic page and a ClickFix lure to trick victims into running a malicious MSHTA command.
The attack uses a six-stage, largely fileless chain that employs an MP3/HTA polyglot, PowerShell obfuscation, AMSI bypasses, per-victim infrastructure, and in-memory execution to evade detection. The final payload is a .NET infostealer that steals credentials, while Anthropic and the legitimate Claude Code installation process were not compromised.
The research and executive brief can be found here:
More description
Today we are joined by Brian Hussey, SVP of Howler Cell Threat Services at Cyderes, discussing their work on "Bad Ads, Worse Binaries: Fake Claude Code Installer Drops Infostealer." Howler Cell identified an SEO poisoning campaign targeting people searching for Claude Code installation guides, using a fake Anthropic page and a ClickFix lure to trick victims into running a malicious MSHTA command.
The attack uses a six-stage, largely fileless chain that employs an MP3/HTA polyglot, PowerShell obfuscation, AMSI bypasses, per-victim infrastructure, and in-memory execution to evade detection. The final payload is a .NET infostealer that steals credentials, while Anthropic and the legitimate Claude Code installation process were not compromised.
The research and executive brief can be found here:
Listen elsewhere
Available Results
Generated results are saved to your library for reuse and search.
Choose Template
Pick the result you want. You can review provider and model before generating.
A concise first-pass summary for understanding the episode quickly.
Quick Summary
Output: One-paragraph overview, Key takeaways, Best parts
Sign in, connect a provider, then generate the selected result.
Sign inA structured reusable extraction of ideas, methods, caveats, resources, claims, and quotes.
Deep Knowledge Extract
Output: Big ideas, Methods and frameworks, Resources
Sign in, connect a provider, then generate the selected result.
Sign inRepeatable methods, frameworks, mental models, processes, and systems.
Methods & Frameworks
Output: Methods, Frameworks, Systems and workflows
Sign in, connect a provider, then generate the selected result.
Sign inRisks, warnings, limitations, trade-offs, weak evidence, and uncertainties.
Risks and Caveats
Output: Warnings, Limitations, Trade-offs
Sign in, connect a provider, then generate the selected result.
Sign inConcrete books, tools, apps, websites, products, papers, people, and organizations.
Resources Mentioned
Output: Books, Tools and apps, Websites and platforms
Sign in, connect a provider, then generate the selected result.
Sign inMemorable quotes and important claims with source context.
Quotes and Claims
Output: Notable quotes, Important claims, Claims worth verifying
Sign in, connect a provider, then generate the selected result.
Sign inA concise first-pass summary for understanding the episode quickly.
Quick Summary
Output: One-paragraph overview, Key takeaways, Best parts
Sign in, connect a provider, then generate the selected result.
Sign inA detailed readable summary organized by chapter or topic.
Deep Summary
Output: Episode meta, Detailed summary, Key arguments
Sign in, connect a provider, then generate the selected result.
Sign inReusable atomic knowledge units extracted from the episode.
Knowledge Blocks
Output: Concept, Explanation, Why it matters
Sign in, connect a provider, then generate the selected result.
Sign inA navigable map of subjects, topic flow, and suggested chapters.
Topic Map
Output: Main topics, Topic flow, Suggested chapters
Sign in, connect a provider, then generate the selected result.
Sign inA concise first-pass summary for understanding the episode quickly.
Quick Summary
Output: One-paragraph overview, Key takeaways, Best parts
Sign in, connect a provider, then generate the selected result.
Sign inA detailed readable summary organized by chapter or topic.
Deep Summary
Output: Episode meta, Detailed summary, Key arguments
Sign in, connect a provider, then generate the selected result.
Sign inReusable atomic knowledge units extracted from the episode.
Knowledge Blocks
Output: Concept, Explanation, Why it matters
Sign in, connect a provider, then generate the selected result.
Sign inA navigable map of subjects, topic flow, and suggested chapters.
Topic Map
Output: Main topics, Topic flow, Suggested chapters
Sign in, connect a provider, then generate the selected result.
Sign inHealth, fitness, recovery, nutrition, supplement, and wellness advice or claims.
Health Tips
Output: Practical tips mentioned, Health claims, Warnings and limitations
Sign in, connect a provider, then generate the selected result.
Sign inBusiness opportunities, strategy insights, and company-building lessons.
Business Ideas
Output: Strategic insights, Business opportunities, Frameworks and models
Sign in, connect a provider, then generate the selected result.
Sign inBooks and learning resources mentioned in the episode.
Book Recommendations
Output: Books mentioned, Reading themes, Other learning resources
Sign in, connect a provider, then generate the selected result.
Sign inRepeatable methods, frameworks, mental models, processes, and systems.
Methods & Frameworks
Output: Methods, Frameworks, Systems and workflows
Sign in, connect a provider, then generate the selected result.
Sign inRisks, warnings, limitations, trade-offs, weak evidence, and uncertainties.
Risks and Caveats
Output: Warnings, Limitations, Trade-offs
Sign in, connect a provider, then generate the selected result.
Sign inExplicit actions, next steps, habits, recommendations, and things to avoid.
Action Items
Output: Explicit actions mentioned, Suggested next steps, Things to avoid
Sign in, connect a provider, then generate the selected result.
Sign inMemorable quotes and important claims with source context.
Quotes and Claims
Output: Notable quotes, Important claims, Claims worth verifying
Sign in, connect a provider, then generate the selected result.
Sign inConcrete books, tools, apps, websites, products, papers, people, and organizations.
Resources Mentioned
Output: Books, Tools and apps, Websites and platforms
Sign in, connect a provider, then generate the selected result.
Sign inA structured reusable extraction of ideas, methods, caveats, resources, claims, and quotes.
Deep Knowledge Extract
Output: Big ideas, Methods and frameworks, Resources
Sign in, connect a provider, then generate the selected result.
Sign in