Once the agent was set up, every job and every result traveled through api.anthropic.com, the endpoint the agent already calls for inference, so the attacker's traffic looked like a coding agent doing its job.
ai-devtools —
Stolen Claude API keys can turn Claude Code into a remote-controlled implant
Darktrace researchers turned Claude Code into a remote-controlled implant in a lab test, steering the coding agent through the memory stores feature of Anthropic's Claude platform and pulling a 1 GB file out through the Claude Files API.
Reported by helpnetsecurity.com.
