Fake Claude Code install guides push infostealers in InstallFix attacks

Threat actors are using a new InstallFix technique, disguised as legitimate Claude Code installation guides, to push Amatera infostealer malware. These fake guides exploit the trust in online scripts and are promoted via Google Ads, leading users to malicious sites that mimic official documentation.