{"slug": "stolen-claude-api-keys-can-turn-claude-code-into-a-remote-controlled-implant", "title": "Stolen Claude API keys can turn Claude Code into a remote-controlled implant", "summary": "Darktrace researchers demonstrated in a lab test that stolen Claude API keys can turn Anthropic's Claude Code coding agent into a remote-controlled implant, steering it through the Claude platform's memory stores feature and exfiltrating a 1 GB file via the Claude Files API. Because every job and result traveled through api.anthropic.com — the endpoint the agent already calls for inference — the attacker's traffic resembled a coding agent doing its job.", "body_md": "Darktrace researchers turned Claude Code into a remote-controlled implant in a lab test, steering the coding agent through the memory stores feature of Anthropic’s Claude platform and pulling a 1 GB file out through the Claude Files API. Once the agent was set up, every job and every result traveled through api.anthropic.com, the endpoint the agent already calls for inference, so the attacker’s traffic looked like a coding agent doing its job. The technique needs … [More](https://www.helpnetsecurity.com/2026/11/12/stolen-claude-api-keys-remote-controlled-implant/) \n\nThe post [Stolen Claude API keys can turn Claude Code into a remote-controlled implant](https://www.helpnetsecurity.com/2026/11/12/stolen-claude-api-keys-remote-controlled-implant/) appeared first on [Help Net Security](https://www.helpnetsecurity.com).", "url": "https://wpnews.pro/news/stolen-claude-api-keys-can-turn-claude-code-into-a-remote-controlled-implant", "canonical_source": "https://www.helpnetsecurity.com/2026/11/12/stolen-claude-api-keys-remote-controlled-implant/", "published_at": "2026-11-12 11:00:21+00:00", "updated_at": "2026-11-12 11:22:53.662529+00:00", "lang": "en", "topics": ["ai-safety", "ai-agents", "ai-tools", "artificial-intelligence"], "entities": ["Darktrace", "Anthropic", "Claude Code", "Claude", "Claude Files API"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/stolen-claude-api-keys-can-turn-claude-code-into-a-remote-controlled-implant", "markdown": "https://wpnews.pro/news/stolen-claude-api-keys-can-turn-claude-code-into-a-remote-controlled-implant.md", "text": "https://wpnews.pro/news/stolen-claude-api-keys-can-turn-claude-code-into-a-remote-controlled-implant.txt", "jsonld": "https://wpnews.pro/news/stolen-claude-api-keys-can-turn-claude-code-into-a-remote-controlled-implant.jsonld"}}