Fake Gemini and Claude Code Sites Spread Infostealers Through SEO Poisoning (infosecurity-magazine.com)

• SEO poisoning directs developers to fake AI tool websites
• Infostealer harvests credentials, API keys, and crypto wallets
• Campaign specifically targets users of Gemini and Claude Code

"A campaign uses SEO poisoning to lure developers to fake Gemini and Claude Code sites. These sites distribute infostealers that harvest credentials, authentication keys, and cryptocurrency wallets. The threat targets users of AI development tools."