Skip to content
Back to Guavy Wire
Crypto

AI-Generated Phishing Link Targets Crypto Developer with Malware

Instruments
NEAR
Share

A crypto developer narrowly escaped malware after following recommendations from an artificial intelligence (AI) tool. Numa Lunah, co-founder of Web3 project NEAR Protocol, nearly lost control of his digital assets due to a phishing attack.

The incident began when Lunah asked AI assistant Claude for a link to download a transcription app. The AI provided an address that led to a fake website, where an infostealer was silently installed on the developer's laptop.

However, the threat wasn't eliminated even after a complete operating system reinstall. When attempting to restore files from a backup, Lunah discovered changes to his SKILL.md document used as a personal style guide for AI. The hackers had modified the file's structure, allowing it to connect to their server and download the infostealer again.

NEAR Protocol co-founder Illia Polosukhin warned about the critical importance of securing autonomous AI agent infrastructure and the growing number of campaigns using 'context poisoning' tactics.

More on Crypto

Disclaimer: Guavy is a data and market intelligence provider, not an investment adviser. The information, signals, and market analysis provided by the Guavy API and related services are for informational purposes only and are not intended as financial advice, investment recommendations, or an endorsement of any particular trading strategy. Trading in volatile markets, including cryptocurrency, carries significant risk and may not be suitable for all investors. Past performance is not indicative of future results. Users should consult with a qualified financial professional before making any investment decisions. Guavy makes no guarantee of trading profits or financial returns.

Market sentiment intelligence for apps, funds & agents

Location

729 55 Ave SW
Calgary AB T2V 0G4
Canada

© 2026 Guavy Inc