Partially Verified65% confidenceFactExact time
In this incident, the reverse tunnel failed to connect in most cases, because enabling the SSH service requires administrator privileges, and the malicious code itself contained coding errors.
3
Sources
65%
Confidence
Short-term (~14 days)
Relevance
10/31/2026
First Seen
Valid until: 11/14/2026
Sources
Related Claims
UnverifiedSSH outbound tunnels can bypass firewalls and NAT blocking of inbound traffic, and attackers achieve persistent login by writing to ~/.ssh/authorized_keys.73% similarUnverifiedThe SSH client will refuse to use key files with group or other permission bits set (permissions must be no more permissive than 600); otherwise the connection is treated as insecure and terminated.69% similarUnverifiedThe malicious extension was not developed by Anthropic but was distributed through an official account, constituting a supply chain compromise; the payload attempted to implant a persistent SSH backdoor, steal information such as hostname, username, architecture and public IP, and write it into authorized keys, failing on most machines because it lacked permission to start the service.68% similarUnverifiedThe malicious code's behavior includes: collecting device information, attempting to implant the attacker's SSH public key into the authorized_keys file, and setting up boot autostart to maintain persistent access.67% similarUnverifiedSSH在系统启动阶段崩溃、磁盘加密需手动解锁或需修改BIOS/UEFI设置时无法连接67% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1118951API
curl https://kongchang.com/api/v1/knowledge/claims/1118951MCP
get_claim(id=1118951)