A fake desktop version of Claude is making the rounds, but instead of giving you AI smarts, it drops the RevStealer malware on your machine. This nasty piece of software is out to jack your crypto and any related data, putting your wallets and accounts at major risk.

What Happened

Attackers have cooked up a phony Claude app that's actually just a delivery system for RevStealer. The whole point? Swipe your crypto and any info they need to break into your accounts and drain your assets.

What RevStealer Goes After

This malware doesn't mess around—it targets a wide range of data and wallets, including:

  • Over 50 different crypto wallets
  • Browser passwords and cookies
  • Messenger app data
  • Individual documents stored on your device

With this much ammo, attackers can widen their attack surface and seriously boost their odds of cleaning out your funds.

How to Stay Safe

If you manage or store crypto on your computer, never install unverified desktop clients. Only download software from the official product website, double-check the domain and the installer's digital signature. Keep your seed phrases and private keys offline, use separate environments for work and crypto, turn on multi-factor authentication, and rotate your passwords regularly. It's smart to limit autofill storage in your browser and disable any extensions you don't really need.

If you spot even the slightest sign of a breach, cut your device off from the internet ASAP, move your funds to safe wallets, and update all your credentials.