GoPlus Security has issued a warning about a new malware threat being spread through Google search ads. Attackers are promoting a fake installation page for Claude Code, which closely mimics the official site. Once users download and install the software, the malware can steal passwords, cookies, session tokens, cryptocurrency wallets, and system information. The security team advises users to be cautious of search results marked with "Ad" and to verify the source of URLs.