Back to today’s briefing

Story perspectives

Google Removes Malicious Claude Plugin Site Targeting Users

3/25/2026

30 7 Full Breakdown

Summary

Story summary

A malicious site posed as a legitimate Claude plugins help page targeting users to steal credentials.
The site was found by a user through a Google search and tied to Bulgarian firm Enhancv R&D, verified by Google.
Google removed the ad and suspended the Enhancv R&D account for policy violations.
The incident highlights the risk of malicious links in paid ads, not limited to AI tools.

1 of 1

Story summary

A malicious site posed as a legitimate Claude plugins help page targeting users to steal credentials.
The site was found by a user through a Google search and tied to Bulgarian firm Enhancv R&D, verified by Google.
Google removed the ad and suspended the Enhancv R&D account for policy violations.
The incident highlights the risk of malicious links in paid ads, not limited to AI tools.