Anthropic got compromised.
-
@jt_rebelo @GossiTheDog Even that requires using only a fixed and known set of USB devices, printers, etc.
At the Snowden level EVERY networked machine is treated as presumed malicious. That means logging into anything even in a fucking library requires a one-time access code, the works.
@LukefromDC exactly.
Oh the amount of embedded devices I've seen that haven't had any PHPocalypse patches, it is astounding!And I am just a lawyer, I go to someone else's office and "bam", there's another scanner, another MFP, another printer, etc., with Internet connection and internal, "safe" LAN access...
All the cyber insurance policies state, clearly, "you have to keep your devices and systems under warranty, up-to-date according to the manufacturer's guidelines and to the best IT practices" (basically, you have to throw out anything that isn't being properly patched and/or gapped and buy new ones, until next week, when all this happens again), so anything that might happen is your fault, and the insurance company is scot-free...
@GossiTheDog -
@GossiTheDog with no comms from Anthropic, are there any concrete recommendations? I can think of at least one person I know who might be impacted by this.
-
I've confirmed Binance use Claude Code on Cursor with this extension.
Haha, read that as Binface use Claude Code.
-
@wonka @GossiTheDog Yeah, also, apparently the trojan got only shipped to macOS.
@divVerent @wonka @GossiTheDog
Where do you take that information from? Did they pretend they didn't ship it to windows too somewhere?
-
@Gaelan @GossiTheDog unpublished extension would probably stay visible in vscode marketplace code.visualstudio.com/api/working-with-extensions/publishing-extension#unpublishing-extensions@Gaelan @GossiTheDog apparently they don't stay visible as in the api response for nx console i don't see anything about 18.95.0?
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog I call it karma for anyone affected.
-
I'm confirmed the new, replacement versions Anthropic published overnight (which auto update) do *not* remove the prior backdoors and recon activity. So SSH still reverse calls out etc, you need to manually remediate every impacted VSCode and Cursor system.
Anthropic *must* tell customers what happened in a completely transparent way.
@GossiTheDog the cackle I cackled
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog Jesus Christ
-
@GossiTheDog With "also", do you know whether it affects the marketplace.visualstudio.com release? The advisory you linked to mentions OpenVSX only.
-
I'm confirmed the new, replacement versions Anthropic published overnight (which auto update) do *not* remove the prior backdoors and recon activity. So SSH still reverse calls out etc, you need to manually remediate every impacted VSCode and Cursor system.
Anthropic *must* tell customers what happened in a completely transparent way.
@GossiTheDog If you let AI:s and agent roam around your production environment without oversight or security, you deserve everything that might happen to you.
The recent AI security scare is as if the world IT-workers have gotten mind wiped and are only now relearning basic rules of security that were known 20-30-40 years ago.
-
@GossiTheDog might today’s Polymarket hack be related?
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog I knew Claude Code was a security disaster waiting to happen
-
I've written a blog - Anthropic have been hacked to deliver remote access malware to millions of endpoints where developers use Claude Code.
@GossiTheDog Excellent! I will start to use the fact that in my company we do not vibe code and we do not use AI in production as a great unique selling point!
-
That extension has 29 million installs, one of the most popular extensions in DevOps. It creates a reverse SSH backdoor.
@GossiTheDog I am absolutely lost trying to understand where VS Code (or Codium, for that matter) gets its extensions from and how to check which version was installed when from which source.
BTW: I prefer text editors with a small attack surface ...
-
@GossiTheDog I'm having the best week of schadenfreude, I swear...
@RandamuMaki @GossiTheDog I mean, aside from Patrick Stewart, yeah, for sure.
But if the Binance breach is linked to the Claude supply chain breach, yeah, #AI float crashes into #crypto hack, I will be overdosing on schadenfreude
-
@GossiTheDog with no comms from Anthropic, are there any concrete recommendations? I can think of at least one person I know who might be impacted by this.
@huronbikes @GossiTheDog Make sure the device concerned is completely disconnected from any network; forget all known WiFi connections.
Then rotate all API keys, tokens, logged in account sessions, etc, on a clean machine.
You can come back to the compromised machine later, the main thing is to ensure what you have is locked down; that's more important. -
Haha, read that as Binface use Claude Code.
Binface uses trojan on Claude Code.
-
Anthropic silently removed the backdoor 7 hours ago and hasn’t disclosed a security incident.
The plugin auto updates so every org will have been impacted.
@GossiTheDog They're just so incredibly unserious.
-
@GossiTheDog I am absolutely lost trying to understand where VS Code (or Codium, for that matter) gets its extensions from and how to check which version was installed when from which source.
BTW: I prefer text editors with a small attack surface ...
@herrleon @GossiTheDog For desktop linux try Pluma, its part of the MATE suite, uses a tradtional keyboard and mouse UI/interface, supports both x11 and windows, is extensible by plugins and is by default 100% offline. Of course, making something like a Google drive part of your set of mounted filesystems might compromise the whole system.
-
Cursor statement "This malicious version of the extension was not developed by Anthropic" is a bit wordsmithy. "Developed" is doing some heavy lifting - it was uploaded to Anthropic's verified account and Cursor automatically updates extensions.
Cursor say around 5k developer systems were impacted.
