Experts warn this fake Claude install guide can be used to empty crypto wallets

A fake Claude Code installation guide hosted on a legitimate claude.ai URL was used to deliver a sophisticated macOS malware called MacSync, which steals cryptocurrency wallet recovery phrases by replacing legitimate wallet apps with Trojanized versions. The attack exploited Anthropic's public share feature and was promoted via a paid Google ad, leading victims to compromise their crypto wallets.