<![CDATA[Fake Claude Code installers are deploying PowerShell stealers that abuse Chrome’s IElevator2 interface to extract browser credentials, cookies &amp; payment data from developers]]>Fake Claude Code installers are deploying PowerShell stealers that abuse Chrome’s IElevator2 interface to extract browser credentials, cookies & payment data from developers.
AI tooling ecosystems are quickly becoming a major attack surface.

Source: https://www.ontinue.com/resource/blog-behind-a-fake-claude-code-installer/

Follow @technadu for more threat intelligence updates.

]]>https://board.circlewithadot.net/topic/986c1abd-c659-418c-8e47-461ca7433018/fake-claude-code-installers-are-deploying-powershell-stealers-that-abuse-chrome-s-ielevator2-interface-to-extract-browser-credentials-cookies-amp-payment-data-from-developersRSS for NodeThu, 14 May 2026 23:24:48 GMTWed, 13 May 2026 14:36:01 GMT60