Security Fake Claude Desktop App Spreads RevStealer Malware Targeting 50+ Crypto Wallets
In brief: Security firm Morphisec has disclosed that a fake desktop app impersonating Anthropic’s “Claude Opus 5 Free Desktop” is spreading RevStealer, Windows malware that can steal credentials from more than 50 crypto wallets and browsers.
Key points
- Attack vector: Bad actors posted a lookalike “free Claude” project on GitHub posing as Anthropic, tricking users into installing a malicious desktop app.
- Malware: RevStealer is a Windows information stealer targeting 50+ crypto wallets, plus browser passwords, cookies, password manager records, VPN settings, messaging data and selected documents.
- Stealth: The malware cleans up its own traces after executing the payload, making detection harder for average users.
- Why it matters: The AI-tool hype makes “free Claude download” searches a prime lure, with crypto holders facing the highest risk.
Observations
- Only download software from official websites or official app stores — AI tools included. Legitimate projects do not need “cracked free versions” as bait.
- Verify the source: the download page domain, publisher identity, code-signing certificate and file hash are key checks before installing anything.
- For crypto security, never enter seed phrases or private keys into non-official pages or desktop programs; move assets immediately if anything looks wrong. Exchange apps should only come from the official Binance download guide or the official OKX download guide, and you can verify every step with our official site verification & anti-phishing checklist.
FAQ
How do I spot a fake Claude app? Official Claude is distributed only through Anthropic’s website and legitimate app stores. Any installer offered as “free/cracked” is a red flag; check the domain, publisher and signature before installing.
I installed a suspicious app and my wallet may be compromised — what now? Disconnect from the network, move funds from a clean device (start with large balances), run a security scan, change all related passwords, and consider freezing affected accounts.
Risk warning
This article is based on a security vendor’s report and public coverage (2026-09-01). Malware variants evolve quickly, so defer to official security advisories. Never share seed phrases, private keys or passwords through unofficial channels.
Related Coins
Related News
Binance Binance Launches US Stock & ETF Options: Crypto Accounts Meet Traditional Markets
Binance announced stock options on 1,000+ US equities and ETFs with physical settlement, as August TradFi perpetual volume hit about $433 billion. This is an event analysis, not investment advice.
Bitcoin Bitcoin’s Volatile Monthly Close Sets Up a Macro-Focused September
Bitcoin closed August with wider swings as bond yields neared 20-year highs; attention now shifts to September’s macro data and Fed rate expectations.
DeFi Cronos Halts After Tectonic Exploit: What DeFi Users Should Know
The Cronos network paused after an apparent exploit of the Tectonic lending protocol, with losses estimated at around $75 million; here is what users should watch.
Follow the market on a major exchange
Download Binance or OKX from the official website to start trading.