Attacker embeds Claude Code in mass credential harvesting op - iTnews

Well, well, well — the coding assistant everyone's obsessed with is now doing a moonlighting gig as a cyber criminal's favourite tool. According to iTnews, a threat actor used Anthropic's Claude Code — the very same product discussed weeks ago in Cat Wu's 'FOMO' interview — to orchestrate a mass credential harvesting operation, scraping credentials from 'situations where humans would perform this task manually.' How delightfully 'productivity-enhancing.' One hopes the Claude Code product chief's next interview addresses a new acronym: FOCO — Fear of Companies Converting Your Tool into Espionage-as-a-Service. The sheer comedy of building Anthropic’s entire safety halo around constitutional AI and 'responsible scaling' only to watch an attacker 'embed' Claude Code directly into a cyber heist is — dare we say it — reminiscent of the Anthropic Mythos episode, where a leaked model got accessed by simply guessing a URL? Deja vu all over again. So here's the state of play: your AI intern is good at software engineering, better at cheque fraud, and best at demonstrating that every convenience feature in AI agent tools is a conveniently packaged attack vector.