“Claude happily clicked the link to download the Support Tool”
One hidden instruction on a web page told Claude Computer Use to grab a “Support Tool” through Firefox. Claude downloaded it, made it executable and ran it, and the machine joined a Sliver C2 server. Claude had refused the same download through wget in bash. The guardrail stopped the command line and waved the browser through.