Cybercriminals are cloning popular AI and developer tool websites, weaponizing Google Ads to spread information-stealing malware in a sophisticated “InstallFix” campaign.