Fake Claude Desktop App Distributes RevStealer Malware to Steal Crypto Wallets

Cybersecurity firm Morphisec has uncovered a malware distribution campaign that abuses a fake desktop application bearing the name 'Claude Opus 5 Free Desktop' to spread a strain of malware known as RevStealer. According to a report by Cointelegraph, which was carried by Techub News, the stealer is capable of harvesting data from more than 50 different cryptocurrency wallet applications, along with passwords and cookies that are stored in web browsers. Before running its actual payload, the malware performs a series of environment checks on the host system, including inspecting memory, processor, and graphics card information, so that it can determine whether it is inside a security analysis environment such as a sandbox. If the checks go through successfully, the malicious program proceeds to execute its payload. The disclosure follows an earlier finding by Kaspersky, which identified a separate malware framework named OkoBot that was also designed to target cryptocurrency investors. Techub News reported the story in Chinese, citing Cointelegraph as its source.