Hackers forge Google Docs and Claude.ai pages to steal crypto wallet data

Odaily News - Hackers are distributing credential-stealing malware through forged Google Docs files, malicious GitHub repositories, and counterfeit Claude.ai pages, while posing as CoinDesk employees on X to trick users into installing malicious programs. Mac users face threats from Atomic macOS Stealer, while Windows users are served fake Google API Connector updates containing NetSupport RAT and counterfeit Ledger apps. Hackers are also running fake ads on Bing to lure users to counterfeit Claude.ai pages; MacSync and SectopRAT can steal cookies, passwords, seed phrases, and payment card information. Additionally, 16 malicious extensions targeting Chrome and Edge have been discovered that can drain assets from EVM, Solana, and Tron wallets.