This is an Ingenious AI security check — part of the free Ingenious AI checks and tools suite.
On October 9, 2026, Push Security and BleepingComputer exposed the "Adception" campaign: attackers bought Google ads whose displayed destinations looked like trusted domains — including bing.com — to lure people onto a fake Claude installer page. The page ran the classic ClickFix playbook: it told victims to copy a command and paste it into a Run dialog or terminal — tricking you into installing the malware yourself. The payload included a clipboard-swap that silently replaces copied cryptocurrency addresses with the attacker's. No exploit kit, no zero-day: just an ad you trusted, an installer you wanted, and a paste you did by hand. This 5-question pre-click quiz uses the campaign's real signatures — would you have fallen for it? Free, no signup.
Key figure: Reported cybercrime losses in the United States reached $16.6 billion in 2024, up 33% from 2023 (FBI IC3, 2024 Internet Crime Report).
Each question is a real Adception-campaign moment. Pick the response you'd actually make. The "right" answer is the safe one.
This self-assessment is informational. It reflects the October 9, 2026 Adception campaign disclosure by Push Security and BleepingComputer — it is not a security audit.
Google is rolling out ClickFix detection in Chrome for people with Enhanced Protection on: when a pasted command matches known ClickFix patterns, Chrome strips personal information from the copied text, checks it against Safe Browsing, and warns before anything runs. It is the first browser-level control built for this exact trick, and it only covers people who turn Enhanced Protection on (Chrome settings, Privacy and security, Safe Browsing). Treat the warning as a seatbelt, not a verdict: a command that passes can still be hostile, and the habit this page tests, never running a pasted command you did not write, stays the real defense. (Per The Hacker News, October 2026, reporting Google's announcement.)
Adception is the name given by Push Security and BleepingComputer to a malvertising campaign disclosed October 9, 2026. It bought Google ads whose displayed destinations looked like trusted domains (including bing.com) to lure victims to a fake Claude installer page. The installer delivered malware — including a clipboard-swap payload that hijacks copied cryptocurrency addresses.
Watch for these Adception-campaign signatures: a Google ad whose displayed destination looks like a trusted domain (bing.com) but lands somewhere else; an installer for popular AI software like Claude offered outside the vendor's official site; and any page that asks you to copy text and paste it into a Run dialog, PowerShell, or terminal — that is the ClickFix clipboard-swap pattern. If any of these appear, close the page and download only from the vendor's official site.
ClickFix is not a single virus — it is a social-engineering technique. The fake error page or installer tells you to copy a command and run it yourself, so your own hands deliver the malware. In the Adception campaign (disclosed Oct 9, 2026 by Push Security and BleepingComputer), the ClickFix lure delivered malware through a fake Claude installer pushed via Google ads.
Adception is the name given by Push Security and BleepingComputer to a malvertising campaign disclosed October 9, 2026. It bought Google ads whose displayed destinations looked like trusted domains (including bing.com) to lure victims to a fake Claude installer page. The installer delivered malware — including a clipboard-swap payload that hijacks copied cryptocurrency addresses.
Disconnect from the internet immediately, do not log into banking or crypto accounts from that machine, run a full scan with current antivirus/EDR, and change passwords from a clean device. Because ClickFix runs with your user's privileges, treat the machine as compromised: back up data, wipe and reinstall the OS if the scan finds anything, and check crypto wallets for unauthorized transactions — the clipboard-swap payload specifically targets copied wallet addresses.
Ad platforms display the advertiser-declared destination, which attackers can spoof or redirect. In the Adception campaign, ads appeared to lead to trusted destinations such as bing.com while actually delivering victims to the fake Claude installer page. The lesson: never trust the displayed destination — verify the URL in your address bar after clicking, and navigate to software downloads by typing the vendor's domain yourself.
Informational only: this page reflects the October 9, 2026 Adception campaign disclosure by Push Security and BleepingComputer. It is not incident-response advice. Confirm details against the published reports.
Filed under Cybersecurity News by Ingenious AI — see the related checks above for more in this series.