Feed / Other
highOthersecurity advisoryms_security_blog · Oct 31, 2026

Inside a malicious Claude Code-branded extension and its persistent SSH backdoor

Microsoft has identified a malicious extension branded as Claude Code that includes a persistent SSH backdoor, posing a significant security risk. This advisory provides detection and remediation guidance to help organizations protect their systems.

“Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and remediate it. The post Inside a malicious Claude Code-branded extension and its persistent SSH backdoor appeared first on Microsoft Security Blog.”
View original article →
Security
threat_protectionendpoint_security
Audience
security_engineeradmin
Environment
cloudon_premises
Ontology Topics
AZ-500SC-200
Classification confidence: 90%
Loading correlations…
Inside a malicious Claude Code-branded extension and its persistent SSH backdoor | 365Forge