Anyone who searched for the Claude desktop app on Bing was sent by a paid ad to claude.ai, Anthropic's real address. The page waiting there was built by attackers and looked like the official download. 7,100 views, at least 29 organizations hit, and a trojan at the end that steals passwords and credit card data.