Cybercriminals are capitalizing on the generative AI boom by distributing a fake Claude Opus 5 application on GitHub, which silently infects Windows systems with the highly evasive RevStealer malware. The malicious repository impersonates Anthropic, using official branding and the promise of "free" desktop access to lure victims through social engineering and game-cheat forums.
According to a new report from Morphisec, the repository - named Claude-Opus-5-Free-Desktop - offers a 101 MB download called ClaudeOpus5-desktop.zip. When a user executes the file, no installation window appears. Instead, the program immediately profiles the victim's hardware, checking the processor count, memory, and graphics hardware against a blocklist to ensure it is not running in an analysis environment.
Once the initial checks pass, the malware attempts to add the user's AppData folder to the Windows Defender exclusion list. It then decrypts a bundled payload and launches RevStealer in the background. At the time of Morphisec's analysis, the malicious file was flagged by only one out of 66 antivirus engines, highlighting its extreme stealth.
How RevStealer Evades Detection and Steals Data
RevStealer is engineered to operate entirely in memory and leave minimal forensic evidence on the disk. It resolves Windows APIs without a standard import table and uses indirect system calls to bypass user-mode hooks. Rather than compiling stolen data into a local archive file, it streams the compromised information directly to its command-and-control (C2) server.
The malware casts a wide net, targeting files from over 50 cryptocurrency wallet applications, a dozen password managers, VPN credentials, and OBS streaming profiles. For users on Chrome and Edge, RevStealer employs a sophisticated bypass for the newer App-Bound encryption. It launches the browser under debugger control and sets a hardware breakpoint to capture the decryption key the moment it appears in memory.
To ensure its infrastructure remains resilient against takedowns, RevStealer utilizes a decentralized fallback mechanism. If its primary C2 server goes offline, the malware reads a backup address from a smart contract hosted on the Polygon blockchain, allowing operators to rotate servers without deploying a new malware variant.
Against a threat built to be silent, the objective is not faster detection. It is making the execution environment itself unreliable, so the theft never completes.
- Shmuel Uzan, Security Researcher at Morphisec
The malware also features strict regional exclusions. A built-in check will immediately terminate the process if the infected system is set to Russian, Ukrainian, or several Central Asian languages. Additionally, it runs ten separate checks to detect virtual machines and sandboxes, assigning a hidden score that triggers a self-shutdown if the environment appears suspicious.
How to Detect and Block RevStealer
Because RevStealer actively disables local defenses and evades traditional antivirus signatures, users and administrators must rely on behavioral monitoring and strict system hygiene to prevent infection.
- Audit Windows Defender Exclusions: Regularly check your Windows Security settings for unauthorized folder exclusions, particularly the AppData directory, which RevStealer attempts to whitelist.
- Monitor UAC Prompts: The malware may request elevated Windows permissions to execute operator-supplied commands. Never approve unexpected User Account Control (UAC) prompts.
- Verify Software Sources: Anthropic does not currently offer a native desktop application for Claude Opus 5. Always verify repository authors on GitHub and avoid downloading "free" versions of premium AI tools from third-party links.
The Decentralized Future of Malware Infrastructure
The RevStealer campaign highlights two alarming shifts in the cybercriminal playbook. First, the weaponization of AI hype is proving incredibly effective. With users eager to bypass waitlists or subscription fees for top-tier models like Claude and ChatGPT, "free desktop clients" have become the ultimate social engineering lure, easily bypassing the natural skepticism users might apply to other software.
Second, the integration of the Polygon blockchain for C2 fallback addresses represents a significant leap in malware resilience. Traditional botnets and info-stealers rely on centralized domains that security researchers can sinkhole or law enforcement can seize. By anchoring their backup infrastructure to an immutable smart contract, the operators behind RevStealer have guaranteed that their malware can always phone home, making complete eradication nearly impossible without targeting the execution environment itself.
