Fake ClaudeDesktop.exe installer served from claude.ai Artifact

Ibrahim Saud@tektrix

•updated Sep 23, 2026•0•0•6

Detects HTTP requests and responses involving the download of an executable file named 'ClaudeDesktop.exe' from the 'claude.ai' host, which is indicative of a malicious campaign distributing SectopRAT.