cladesktop.gitlab[.]ioDomain
Reported by 2 independent sources · first reported by Trend Micro Research · last reported
Last reported 1 month ago
What the reports say
2 reports, newest first · the exact sentence from each-
HBO Max ads on a compromised Reddit account exposed a massive PasteSwitch ClickFix operation“…ore.com, filesiriuscore.com, alfredaps.com, hbomaxx.us, hbomax-macos.com, bright-links.com, codex-notes.com, storageprofiler.com, cladesktop.gitlab[.]io, cli-desktop.com, cli-stack.com, homebrwmac-hub.com, clean-disk-guide.com”
-
Threat Actors Abuse claude.ai Shared Chat for ClickFix Malvertising Campaign“The domains claude-desktop-lm.gitlab.io (203 traffic counts) and cladesktop.gitlab[.]io (135 traffic counts) were also created and received more traffic, which suggests that more people are searching for Claude-related keywords compared to Perplexity or ChatGPT.”
Indicators reported together
named in the same reports- perplexity-platform.gitlab[.]ioin 1 report
- claude-code-app.gitlab[.]ioin 1 report
- claudeapp.gitlab[.]ioin 1 report
- mac-clean-storage.gitlab[.]ioin 1 report
- mac-guide-tool.gitlab[.]ioin 1 report
- chatgpt-codex.gitlab[.]ioin 1 report
- claude-desktop-lm.gitlab[.]ioin 1 report
- codexgpt.gitlab[.]ioin 1 report
- chatgpt-codex-app.gitlab[.]ioin 1 report
- chatgpt-codex-lm.gitlab[.]ioin 1 report
- claudecode-desktop.gitlab[.]ioin 1 report
- claudecode-download.gitlab[.]ioin 1 report
- hxxps://loserrq0j1sha8[.]com/debug/loader.sh?build=a39427f9d5bfda11277f1a58c89b7c2din 1 report
- loserrq0j1sha8[.]comin 1 report
Copy these 14 indicators · defanged
Thanks — we review every report.