“Claudy Day” Flaws Allow Data Theft via Fake Claude AI Ads, Report

Multiple mid-March 2026 reports describe active campaigns and vulnerabilities enabling data theft and stealthy malware delivery. ‘Claudy Day’ and related Claude fraud campaigns use fake Google Ads and malicious AI extensions to phish tech professionals and seed MacSync and other malware; ClickFix scams trick Windows users into running hidden commands that map attacker-controlled drives and load malware. Threat actors (e.g., Storm-2561) are using fake Fortinet/Ivanti VPN sites to distribute the Hyrax infostealer, while Vidar 2.0 spreads via fake game cheats on GitHub and Reddit. Researchersalso