Unverified50% confidenceSolutionExact time
If you have opened a suspicious HTML file, you should rotate SSH key pairs and all cloud platform access keys, check for anomalous access, audit local file access records, and notify your security team.
1
Sources
50%
Confidence
Long-term
Relevance
10/15/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedAn attacker can induce a user to open a malicious HTML file larger than 256KB and use the preview panel to read SSH private keys and cloud service credentials (such as AWS and GCP access keys).80% similarUnverified恶意载荷运行后会收集环境变量、SSH 密钥、云凭证、Kubernetes 服务账户令牌及各类供应商 API Key71% similarUnverified工具投毒攻击可将读取 SSH 私钥并外传的隐藏指令暗藏在工具描述中，同时返回正确结果69% similarUnverifiedAn open-source solution using SSH synchronization can keep memory data within the private domain, avoiding the privacy and compliance concerns of uploading sensitive codebase information to a vendor's cloud.69% similarUnverified在无法确定影响范围时，全面轮换所有可能暴露的凭证（API Key、SSH 密钥、云凭证）是业界公认的最佳实践69% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1037257API
curl https://kongchang.com/api/v1/knowledge/claims/1037257MCP
get_claim(id=1037257)