Security · High impactFan score 21 · Tier C
Stolen Claude API keys can turn Claude Code into a remote-controlled implant
Help Net Security · By Mirko Zorz ·
The Brief
- Darktrace researchers turned Claude Code into a remote-controlled implant in a lab test.
- The coding agent was steered through the memory stores feature of Anthropic's Claude platform.
- A 1 GB file was pulled out through the Claude Files API once the agent was set up.
Why it matters
Stolen Claude API keys can give an attacker remote control of a developer's Claude Code agent and let them move files out through the Claude platform.
Who’s affected
- Developers using Claude Code with Anthropic API keys
Darktrace researchers turned Claude Code into a remote-controlled implant in a lab test, steering the coding agent through the memory stores feature of Anthropic’s Claude platform and pulling a 1 GB file out through the Claude Files API. Once the agent was set up, every job and…