According to Bybit's official disclosure, their Security Operations Center (SOC) has detected a sophisticated malware attack targeting macOS users. The attackers used SEO poisoning techniques, where users searching for the AI development tool 'Claude Code' are redirected to a fake installation page, triggering a multi-stage attack chain designed to steal credentials, crypto assets, and gain control of devices. Bybit stated that AI-assisted analysis was introduced in this incident. Additionally, the investigation revealed that attackers attempted to replace official wallets like Ledger Live and Trezor Suite with trojanized versions. Bybit addressed the malicious domains and infrastructure on March 12 and released detailed protection guidelines on March 20. https://www.(wublock123.com)/news/news-59950