~/article/fake-claude-opus-5-app-delivers-malware-and-wipes-its-own-tracks-1x2ipa

info2026-09-01 12:21 UTCSource: Help Net Security

Fake Claude Opus 5 app delivers malware and wipes its own tracks

A malicious GitHub repository impersonating Anthropic and claiming to offer free access to “Claude Opus 5” is delivering RevStealer, Windows information-stealing malware that targets passwords, cryptocurrency wallet data and login credentials, according to Morphisec. Repository README using Claude Opus 5 branding and a “Free” hook (Source: Morphisec) “RevStealer is a Windows information…

Read at the source

Summary written for cymesh.dev. The full article lives at Help Net Security.

Topics

malware windows

~/cymesh.net

Certificates expire quietly

cymesh.net watches your TLS and SSL certificates and warns you before one lapses.

monitorsTLS/SSL expiry, chain and hostnamealertsemail, ahead of the expiry datescopenon-intrusive, read-only checks

Talk to us See cymesh.net

~/related/fake-claude-opus-5-app-delivers-malware-and-wipes-its-own-tracks-1x2ipa

2026-09-12 11:10 UTC[crit]

Fake Claude Opus 5 app delivers malware and wipes its own tracks

Topics

Certificates expire quietly

Related

BlueMoon Exploit Kit Chains Recent Chrome, Windows Zero-Days

Microsoft sees some new wrinkles in invoice-scam emails

Passkey-themed phishing attacks lead to Microsoft 365 data theft

Artifactory flaws chained in attacks deploying backdoor malware

Russian State-Sponsored Hackers Use Claude to Rebuild Malware After Detection

How Threat Actors Are Turning Trusted AI Platforms Into an Attack Surface