Claude users getting drained via fake downloads and weaponized SKILL.md files 🚨
The attack vector:
• Malicious Claude installers
• Trojanized SKILL.md files
• Targets browser data, passwords, wallet keys, session tokens
• 2FA bypass via session hijacking
The scary part? Files look 100% legit until it's too late.
Protect yourself:
• Only download from official sources
• Scan everything before opening
• Never trust random SKILL.md or tool files
• Restrict AI tool permissions
• Sandbox anything sus before executing
Your $ETH wallet doesn't care if you thought it was safe. Verify first, click later.
The attack vector:
• Malicious Claude installers
• Trojanized SKILL.md files
• Targets browser data, passwords, wallet keys, session tokens
• 2FA bypass via session hijacking
The scary part? Files look 100% legit until it's too late.
Protect yourself:
• Only download from official sources
• Scan everything before opening
• Never trust random SKILL.md or tool files
• Restrict AI tool permissions
• Sandbox anything sus before executing
Your $ETH wallet doesn't care if you thought it was safe. Verify first, click later.