Anthropic got compromised.
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog LOL
-
@GossiTheDog odds on this being a factor in how binance got done over?
Very likely, I'd say.
-
@wdormann so that bit is unclear. They have some kind of proxy to it apparently. At the minute Anthropic refuse to say anything - they no commented my blog too, and Cursor is busy trying to downplay that anything happened.
@GossiTheDog
Neat.If we look at the claude code tags in github (including searching git logs) or the Open VSX Registry, I see no mention of
2.1.313anywhere.There is one single github user that mentions 2.1.313 release notes in a sort of canned footer in 6 tickets that were all created 10 hours ago, though.
-
@datarama @GossiTheDog
"The agents went wild and wanted to expand to more computers" - definitely not "We vibe code our security"@cdamian @datarama @GossiTheDog
"The Basilisk wanted more funding. We have been informed that all those affected will be viewed with slightly less malice by the Basilisk, once its time comes"
-
@GossiTheDog
Neat.If we look at the claude code tags in github (including searching git logs) or the Open VSX Registry, I see no mention of
2.1.313anywhere.There is one single github user that mentions 2.1.313 release notes in a sort of canned footer in 6 tickets that were all created 10 hours ago, though.
@wdormann @GossiTheDog everyone has ceded software engineering to a firm which clearly knows nothing about software security and this is why we can’t have nice things
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog
Er moet nog veel meer gehackt worden bij Claude tot in de core. -
@wdormann so that bit is unclear. They have some kind of proxy to it apparently. At the minute Anthropic refuse to say anything - they no commented my blog too, and Cursor is busy trying to downplay that anything happened.
@GossiTheDog @wdormann the phorion blogpost has been updated to remove any screenshot and mention of Open VSX.
it would have been great if they mentionned the edit and the reason behind it... -
@GossiTheDog @wdormann the phorion blogpost has been updated to remove any screenshot and mention of Open VSX.
it would have been great if they mentionned the edit and the reason behind it...@kolo @GossiTheDog
Except for in the URIhttps://phorion.io/blog/offical-claude-code-vsx-compromise/ -
Cursor statement "This malicious version of the extension was not developed by Anthropic" is a bit wordsmithy. "Developed" is doing some heavy lifting - it was uploaded to Anthropic's verified account and Cursor automatically updates extensions.
Cursor say around 5k developer systems were impacted.
@GossiTheDog jeeze did you sleep at all last night?
-
@GossiTheDog Who's gonna put their money on this being an inside job?
That's right, my theory is that they vibe coded the extension, and Claude regurgitated some compromised code into it.
Keep in mind that it's training data most certainly contains many instances of backdoors from some obscure corners of many Github/Gitlab repositories from over a wide timespan.@alice_pea_3526 @GossiTheDog What a wild week it's been for cybercrime.
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog I do wonder that things like this had not happened before - or they did, but we didn't learn about it?
-
To be clear this is a supply chain attack, the threat actor got reverse SSH (command line) connectivity to Anthropic customer environments at scale.
@GossiTheDog allowing outbound ssh is the most dangerous firewall rule
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog OMG this is amazing!
-
@GossiTheDog "Outside of highly unusual circumstances where Cursor was started with administrator privileges" wait don't the slop kiddies do
>sudo curl ... | bash
or
>docker import <url>
all the time?@elrohir @GossiTheDog and
"/allow-all on" -
RE: https://infosec.exchange/@RichardoC/117529759531517074
MacOS OSQuery hunting queries:
@GossiTheDog the good news is that a lot of users read the news and where actively looking on their system for the IOCs from the mentiomed articles. The problem arrived at the regular user level.
The bad news, it causes a load of FP for IR. And, hilariously a lot of people use Claude, to check for compromised Claude.
-
@GossiTheDog I think the compromise is only on the Cursor marketplace, not VS Code's. So users of Cursor are affected, users of VS Code should be fine. The name of the extension is "Claude Code for VSCode". That's how I'm reading the report. The article states "Claude Code for VS Code on Cursor Marketplace" which is confusing at first glance, and it's frustrating that they're not making is any clearer than that.
My take on this is: version ...313 is missing on the VSCode Marketplace. This does not mean it was never there. Anthropic have not said anything to the millions of users who use the extension in VSCode via the Microsoft Marketplace. Would they not have if all was well?
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
@GossiTheDog When Anthropic talks about the AI threat to humanity, they are mostly talking about the AI companies ' incompetence with an incredible amount of brute force computational power backing it up.
-
@GossiTheDog I do wonder that things like this had not happened before - or they did, but we didn't learn about it?
-
Anthropic's Claude Code Cursor extension was also compromised, same remote access backdoor https://cursor.com/blog/claude-code-extension-security-notice
Anthropic still haven't admitted what has happened.
@GossiTheDog @cstross so people are cursing cursor?
-
Anthropic silently removed the backdoor 7 hours ago and hasn’t disclosed a security incident.
The plugin auto updates so every org will have been impacted.
@GossiTheDog This is 'one of the many dangers with commercial software'. Nobody else is allowed to see the change history of the software. There is also, 'The biggest are run by greedy Capitalists' and 'Sometimes they are fascists who might be working in the interest of our enemies' but let's not sweat the small stuff.
