Numa Lunah, the co-founder of Refi Hub, says a transcription-app download shared through a Claude chat window led to a malware infection on his device. The download purported to direct users to a legitimate site but instead pointed to a spoofed webpage bundled with malicious software designed to harvest data from the laptop.

Lunah reformatted the affected machine and reported no evidence of data leakage. In his backups, he later found a compromised Claude Code skill file named SKILL.md that had been disguised as a style guide he authored and allegedly contained instructions to trigger the malware again and to steal credentials.

Microsoft Defender Experts have warned that attackers are shifting away from poisoning search results toward corrupting large language model responses. Reported tactics include attacker-controlled download links, fake AI-branded installers, and compromised code repositories and agent skills.

The analysis notes that workers in the crypto sector may possess irreversible credentials such as seed phrases, private key files, hot wallet JSON files, exchange API keys with withdrawal permissions, and deployer keys, underscoring the potential impact of credential theft.