Anthropic got compromised.
-
Anthropic's Claude Code Cursor extension was also compromised, same remote access backdoor https://cursor.com/blog/claude-code-extension-security-notice
Anthropic still haven't admitted what has happened.
@GossiTheDog
Any recommendations for non-developer/non-security expert end users wanting to check if their personal devices are compromised? -
@GossiTheDog If you let AI:s and agent roam around your production environment without oversight or security, you deserve everything that might happen to you.
The recent AI security scare is as if the world IT-workers have gotten mind wiped and are only now relearning basic rules of security that were known 20-30-40 years ago.
@h4890
> the world IT-workers have gotten mind wipedYes. All not wiped enough were fired, some smart ones still cling to the desks but are in hiding, pretending they also were ai-debrained.
-
@jalict @GossiTheDog Thanks I was also confused about this, very helpful!
@prism@infosec.exchange @GossiTheDog@cyberplace.social Happy to hear!
-
I've confirmed Binance use Claude Code on Cursor with this extension.
@GossiTheDog ROFLMAO
-
@GossiTheDog with no comms from Anthropic, are there any concrete recommendations? I can think of at least one person I know who might be impacted by this.
@huronbikes @GossiTheDog Yes, of course there are recommendations. Uninstall Claude.
-
@huronbikes @GossiTheDog I'd go with:
Disconnect from any network
Save your data (only) to removable storage
Erase and reinstall from media.Essentially, 'Nuke it from orbit'
I recognise this might be a bit draconian for many, though.@tjbutt58 @huronbikes @GossiTheDog What if it's in the UEFI firmware, eh?
https://firmguard.com/the-6-unparalleled-uefi-bios-firmware-attacks-and-their-impact/
When they say nuke the site from orbit they do mean nuke the entire thing from orbit, not reinstall some piece of software on a computer. You need to nuke the entire machine, it's the only way to be sure.
-
Cursor statement "This malicious version of the extension was not developed by Anthropic" is a bit wordsmithy. "Developed" is doing some heavy lifting - it was uploaded to Anthropic's verified account and Cursor automatically updates extensions.
Cursor say around 5k developer systems were impacted.
@GossiTheDog "A malicious actor used access to Cursor’s marketplace to publish a tampered extension targeting Cursor's users, we were not involved with building, publishing, or hosting this. The versions on our official channels including VS Code and OpenVSX are not affected and this only impacts Cursor users." https://news.ycombinator.com/item?id=50305139
-
Anthropic's Claude Code Cursor extension was also compromised, same remote access backdoor https://cursor.com/blog/claude-code-extension-security-notice
Anthropic still haven't admitted what has happened.
@GossiTheDog per these comments it was a forged version inside Cursor’s own extension marketplace, not a package published by/as Anthropic to the wider one https://news.ycombinator.com/item?id=50304129
-
Cursor statement "This malicious version of the extension was not developed by Anthropic" is a bit wordsmithy. "Developed" is doing some heavy lifting - it was uploaded to Anthropic's verified account and Cursor automatically updates extensions.
Cursor say around 5k developer systems were impacted.
@GossiTheDog anthropic are now quite directly saying it is not their account and implying cursor's marketplace was compromised. it wasn't on OpenVSX, only Cursor's weirdo version
https://news.ycombinator.com/item?id=50304129 -
RE: https://infosec.exchange/@RichardoC/117529759531517074
MacOS OSQuery hunting queries:
Updated my blog with a statement from Anthropic, they say the breach was at Cursor:
"A malicious actor used access to Cursor’s marketplace to publish a tampered extension targeting Cursor's users, we were not involved with building, publishing, or hosting this".
The extension in Cursor itself shows as published by Anthropic, however it looks like they are moonwalking away from that ownership now.
-
Anthropic got compromised.
Their Claude Code extension on Visual Studio has malware in it, which creates a remote access Trojan to desktops.
This really is not good, when are people going to wake up. ?
-
Updated my blog with a statement from Anthropic, they say the breach was at Cursor:
"A malicious actor used access to Cursor’s marketplace to publish a tampered extension targeting Cursor's users, we were not involved with building, publishing, or hosting this".
The extension in Cursor itself shows as published by Anthropic, however it looks like they are moonwalking away from that ownership now.
@GossiTheDog So it is all Elons fault?
-
Updated my blog with a statement from Anthropic, they say the breach was at Cursor:
"A malicious actor used access to Cursor’s marketplace to publish a tampered extension targeting Cursor's users, we were not involved with building, publishing, or hosting this".
The extension in Cursor itself shows as published by Anthropic, however it looks like they are moonwalking away from that ownership now.
Cursors statements to this can basically be summed up with this GIF, everything is basically about how this is a non-issue. Just, you know, thousands of developers getting owned.
-
@h4890
> the world IT-workers have gotten mind wipedYes. All not wiped enough were fired, some smart ones still cling to the desks but are in hiding, pretending they also were ai-debrained.
@ohir @GossiTheDog Unrelated, but once the companies have vibe coded themselves into a corner, the hiring will start again.
This is just the market, over time, optimizing resource use. In the short run it is painful, but in the long run necessary for the survival of the human race.
-
Cursors statements to this can basically be summed up with this GIF, everything is basically about how this is a non-issue. Just, you know, thousands of developers getting owned.
@GossiTheDog yep, consider each of those 5000 have access to production pipelines and servers... both... the own ones and customer ones....
-
Cursors statements to this can basically be summed up with this GIF, everything is basically about how this is a non-issue. Just, you know, thousands of developers getting owned.
Anthropic themselves published the 'fixed' versions overnight on OpenVSX and VSCode Marketplace, and chose not to tell anybody what had happened.
-
Updated my blog with a statement from Anthropic, they say the breach was at Cursor:
"A malicious actor used access to Cursor’s marketplace to publish a tampered extension targeting Cursor's users, we were not involved with building, publishing, or hosting this".
The extension in Cursor itself shows as published by Anthropic, however it looks like they are moonwalking away from that ownership now.
@GossiTheDog do we believe anthropic?
-
Anthropic themselves published the 'fixed' versions overnight on OpenVSX and VSCode Marketplace, and chose not to tell anybody what had happened.
@GossiTheDog So you have confirmation that the malicious package was uploaded to all of the extension marketplaces, not just Cursor?
-
I've confirmed Binance use Claude Code on Cursor with this extension.
@GossiTheDog Wow, they really did a swell job of shooting their own dicks off
-
@GossiTheDog So you have confirmation that the malicious package was uploaded to all of the extension marketplaces, not just Cursor?
@mttaggart nope, Anth won't comment about how far it got. I just know Anthropic published a new version, which no changes from the untampered version, to OpenVSX and VSCode Marketplace last night when all this kicked off and then didn't tell anybody there was a problem.
