Beagle Windows Malware Fake Claude Website | MSSP Advisory

Threat actors created a fake Claude AI website that distributes Beagle malware through a fraudulent Claude-Pro Relay download. The malware establishes persistent backdoor access on Windows systems and can steal credentials, execute commands remotely, and maintain persistence through registry modifications. This represents a new social engineering vector targeting users seeking legitimate AI productivity tools.

Your clients are actively downloading AI tools right now and this fake site ranks high in search results for Claude AI downloads. If Beagle compromises a client endpoint, the malware can steal RMM agent credentials and pivot into your management infrastructure. You have 24 hours to warn clients before this threat spreads wider through search engine optimization.

📬