A legitimate Google ad could lead to data exfiltration through a chain of Claude flaws.