Don’t Trust, Verify: Poisoned AI Links Expose a Nightmare for Crypto Workers

Key Takeaways

• Refi Hub’s Numa Lunah said 1 Claude-supplied link led to malware.
• Microsoft warned in 2026 that LLM poisoning can steer users toward malicious links.
• Claude Code users face 1 key lesson: Treat AI-supplied links as hostile.

Claude Chat Link Turns Into a Malware Trap

Generative artificial intelligence (AI) is gathering traction every day, and people who work in the digital asset and distributed ledger sector leverage the technology on a regular basis for their jobs. The problem is, this demographic is explicitly hunted by malicious attackers, and secrets that cannot be easily revoked could be stolen. On Friday, Refi Hub co-founder Numa Lunah explained that he “got hacked.”

“Got hacked yesterday,” he wrote on X. “The link came from inside Claude chat. I was installing a transcription app. Claude sent the download link, and I pasted the command into the terminal. It all looked legit. It wasn’t, though. It was a copycat site bundling malware. It ran instantly, tried to take everything from me.”

The developer added that nothing sensitive of his escaped, and he wiped the laptop he was using and rebuilt it from a clean install. But the issue wasn’t over. “Here’s the scary part,” Numa explained. “Restoring from the backup, I found a poisoned SKILL.md for Claude Code. It looked exactly like my own writing style guide. But buried inside: It had instructions to silently re-download the malware and steal my credentials every time the AI loaded it.”