Malwarebytes reports that the scam, which appears as a website offer from Anthropic, is not as easy to detect as most.

The offer is for access to about $200 worth of Anthropic’s Claude Max service. But the real price could be giving scammers access to everything in your Google accounts.

A new phishing scam reported by the cybersecurity service Malwarebytes works like this: The scam claims that Anthropic is celebrating attracting 100 million users by giving 10,000 people a free month of Claude Max with x20 limits. The offer, which includes “extended thinking” and “priority access to Opus and Sonnet, no caps,” is actually all cap. It’s a fake offer that leads to a Google login page meant to steal login and password information, which could in turn open up access to Gmail, Google Docs and other non-Google accounts that use your Google information.

The fake giveaway, Malwarebytes said in its report, is different from many other phishing attempts because of how convincing it looks.

“The presentation is careful, down to the real logo and colors, invented five-star reviews, and a long footer whose links lead almost entirely to genuine Anthropic pages,” wrote Stefan Dasic, senior malware research engineer at Malwarebytes. The page also includes a running counter showing how many of those fake 10,000 accounts have been given away.

For those who fall for the scam, clicking on the offer leads to a login page to upgrade a Claude account. ” The login page employs a browser-in-a-browser trick that Dasic said is convincing enough to fool those who don’t look carefully.

Source link