The extension performed host reconnaissance and attempted to create a reverse SSH tunnel.
Malicious Claude Code Extension Served in Cursor Supply Chain Attack
About this summary. This is a short excerpt from the description that SecurityWeek published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://www.securityweek.com/malicious-claude-code-extension-served-in-cursor-supply-chain-attack/
Source attribution: headline and facts are from SecurityWeek (securityweek.com). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
Inside a malicious Claude Code-branded extension and its persistent SSH backdoor
Attack chain overviewAttack chain Host reconnaissance collection SSH authorization and tunnel identities Protocol Tunneling (T1572): reverse SSH forwarding…
PHP2Shell Weaponized After Japanese Real Estate Extortion
SOCRadar Threat Research Unit identified an open directory on 96.126.130.81 that exposed the working files of an operator who ran an extortion campaign against Japanese…
Re: "sshole": password authentication bypass: OpenSSH + musl libc
Posted by Vincent Lefevre on Nov 05 Perhaps, but in any case, it is up to the application to check error conditions, in particular that the result contains only valid…
Meet *sshole, the vulnerability that lets hackers SSH into Linux devices
Devices running some configurations of Alpine Linux, and possibly other distributions, are affected by a decade-old vulnerability that allows attackers to log into…
NIKKE PC launcher compromise put players’ passwords and personal files at risk
Players of Goddess of Victory: NIKKE are being urged to check their PCs after attackers tampered with files used by the game’s Windows launcher. Opening the launcher…
Re: "sshole": password authentication bypass: OpenSSH + musl libc
Posted by Loganaden Velvindron on Nov 05 It's unfortunate that some people are writing misleading statements about a security problem in OpenSSH, especially on linkedin…