[Hackers Forge Google Docs and Claude.ai Pages to Steal Crypto Wallet Data] According to Huntress, hackers are spreading data-stealing malware by forging Google Docs files, malicious GitHub files, and fake Claude.ai pages. Attackers impersonate CoinDesk employees on X to lure users into installing malicious programs. Mac users face threats from the Atomic macOS Stealer, while Windows users are targeted with fake Google API Connector updates that implant NetSupport RAT and counterfeit Ledger applications. Hackers place fake ads on Bing to direct users to counterfeit Claude.ai pages. MacSync and SectopRAT can steal cookies, passwords, seed phrases, and payment card information. Socket has identified 16 malicious extensions targeting Chrome and Edge, capable of draining assets from EVM, Solana, and Tron wallets.