Refi Hub co-founder claims a malicious link from Claude led to a credential theft attempt.

iconKuCoinFlash
Share
This is the logo of the coin.
BTC
$77,033.10-1.05%
This is the logo of the coin.
ETH
$2,464.670.01%
This is the logo of the coin.
XRP
$1.33-2.56%
This is the logo of the coin.
SOL
$99.43-1.47%
This is the logo of the coin.
DOGE
$0.08353-1.72%
AI summary iconSummary
Refi Hub co-founder Numa Lunah reported a credential theft attempt after clicking a malicious link from a Claude chat window. The link directed to a fake site containing malware, which failed to steal data after he reinstalled his laptop. A compromised SKILL.md file, disguised as his style guide, was later discovered. Microsoft Defender experts warn that attackers are now poisoning AI responses with malicious links. Inflation data and crypto news remain key concerns as security threats continue to evolve.
ME AI message: Numa Lunah, co-founder of the crypto project Refi Hub, said he was hacked after installing a transcription app via a download link provided in a Claude chat window. The link led to a spoofed website bundled with malware that attempted to steal all information on his device. Numa Lunah stated he wiped and reinstalled the affected laptop and found no evidence of sensitive data leakage. Later, he discovered a compromised Claude Code skill file, SKILL.md, in his backups—this file mimicked his personal style guide and contained instructions to re-download malware and steal credentials each time it was loaded. Microsoft Defender Experts have warned that attackers have shifted from search engine poisoning to large language model response poisoning, employing tactics such as recommending download links controlled by attackers, impersonating AI-branded installers, and distributing contaminated code libraries and proxy skills. Crypto industry professionals may hold irreversible credentials such as mnemonic phrases, private key files, hot wallet JSONs, exchange API keys with withdrawal permissions, and deployer keys. (Source: ChainCatcher)
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information. Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.