Numa Lunah, a co-founder of Refi Hub, says he was breached after installing a transcription app that was delivered through a download link in a Claude chat window. The link redirected him to a spoofed website that carried malware designed to harvest data from his device.

Lunah wiped and reinstalled the laptop involved and initially found no obvious data leakage. In a later review, he discovered a compromised Claude Code skill file named SKILL.md in his backups. The file had been disguised as a style guide he authored and included instructions to redownload the malware on each load and to steal credentials.

Microsoft Defender Experts have warned that attackers are shifting from SEO poisoning to large language model answer poisoning. Reported tactics include attacker-controlled download links, AI-branded fake installers, and compromised code repositories and agent skills.

The advisory notes that crypto industry workers may hold sensitive, irreversible credentials such as seed phrases, private key files, hot wallet JSON files, exchange API keys with withdrawal permissions, and deployer keys.