Caveman token compression earns an independent JetBrains benchmark: the free Claude Code skill saves 8.5% of output tokens on real agentic tasks — not the advertised 65%, which was measured on chat.
ACR Stealer campaigns use ClickFix lures, JPEG steganography, and WebDAV to steal browser tokens, passwords, PDFs, and synced ...