According to CoinMeta, Coin Bureau warns that users of Claude may be subjected to malware attacks without their knowledge, resulting in the theft of their crypto assets. The attack activities targeting Claude users spread information-stealing tools that quietly obtained passwords and browser data, directly threatening the security of exchanges and hot wallets. A user was compromised through a download link provided in their Claude chat; the link came from a phishing website that bundled malware. Worse still, their backup contained a forged skill.md file, which would silently reinstall the malware every time AI was loaded. These attack activities affected 29 organizations in just two days, with data originating from Huntress.