🚨

Following massive attacks targeting trading platforms and draining hundreds of millions of dollars from wallets, former Binance founder CZ confirmed a shocking truth: major hacks usually don’t start with complex blockchain vulnerabilities, but in the same way that previously brought down Bybit—a breach of a single engineer’s or developer’s personal device! ⚠️

This warning prompted one developer to use Claude Code to inspect his device (a MacBook) and check its hidden files... The horrifying discovery: 👇

1️⃣ More than 18,000 secretly recorded files:

AI discovered 18,742 photos and video clips, recorded and timestamped, hidden deep inside system folders by a stealth app that had been running silently for 14 months.

2️⃣ Live surveillance right up to the last second:

When the folder was opened, the latest recording had been captured just 12 seconds before the inspection, meaning the spyware was monitoring every movement on the device in real time.

3️⃣ Stopping the spying with AI:

Claude Code tracked active background processes, identified the surveillance software that launched automatically at startup (Launch Agents), and immediately stopped and deleted it.

💡 Bottom line: You may not be able to prevent attacks on major platforms, but you can secure your personal devices and regularly review app permissions so they don’t become the first weak link in a disaster!

Quick steps to check your device (whether you use a Mac or Windows)

Review startup items: Check the Login Items list in your Mac settings, or Startup Apps in the Task Manager on Windows, and disable any unfamiliar programs.

Review camera and screen permissions: In Privacy & Security settings, check which apps have permission for Screen Recording or access to your camera and microphone.

Avoid unknown extensions and libraries: Don’t install browser extensions or run code and ready-made projects from untrusted sources, as they are a common entry point for session-stealing malware (infostealers).