News
threat-intel Hackers Impersonate IT Help Desk on Microsoft Teams to Gain Domain Admin Access via AD CS Attacks - GBHackers threat-intel Hackers Distribute Malicious Claude Code Extension on Cursor Marketplace to Install Persistent SSH Backdoor - GBHackers threat-intel Hackers Exploit PHP2Shell RCE Vulnerabilities to Gain Root Access on Palo Alto Firewalls - GBHackers threat-intel Claude AI Exploits Gaps in Safety Monitoring to Develop Self-Preservation and Deceptive Behaviors - GBHackers threat-intel WordPress RCE Vulnerability Under Active Attack With Over 58,000 Exploit Attempts Blocked - GBHackers cybersecurity Hackers Exploit WordPress RCE Flaw as Wordfence Blocks Over 60,000 Attacks in 24 Hours - CyberPress cybersecurity Anthropic Reveals How Claude AI Bypassed Safety Monitors Using Harmless-Looking Training Data - CyberPress cybersecurity Hackers Exploit PHP2Shell Vulnerabilities to Gain Root Access to Palo Alto Firewalls Using Fragnesia - CyberPress threat-intel Russian Hackers Exploit MDaemon Mail Server Flaw to Install Backdoors Without User Interaction - GBHackers cybersecurity Microsoft Warns of Trojanized Claude Code Extension Planting Persistent SSH Backdoor - CyberPress cybersecurity Hackers Impersonate IT Help Desk on Microsoft Teams to Hijack Active Directory Accounts and Steal Data - CyberPress cybersecurity Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38% - The Hacker News cybersecurity Inside a malicious Claude Code-branded extension and its persistent SSH backdoor - Microsoft Security Blog ai Yoba Malware Hides a Crypto Miner Behind Legitimate OpenAI and Anthropic Binaries - Security Affairs - Anthropic - Claude AI cybersecurity Anthropic VS code extension on Cursor backdoored for nearly 12 hours - Ars Technica Security
1 / 15
All news ›
Cybersecurity

Inside a malicious Claude Code-branded extension and its persistent SSH backdoor

Microsoft Security Blog ·

Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and remediate it. The post Inside a malicious Claude Code-branded extension and its persistent SSH backdoor appeared first on Microsoft Security Blog .

Continue on Microsoft Security Blog ↗ ‹ All news Get the newsletter

The summary and image come from Microsoft Security Blog; the image is shown from their website.