432ccdee3801f99e52b8fe31f69ea9870118e96ea7ef9ecabed1479621b5ab62

SHA256 Hash

Threat entity extracted from intelligence sources

Frequency

2

occurrences

First Seen

October 30, 2026

Last Seen

October 30, 2026

IOC Validation

ThreatCluster AI

Confirmed IOC — High confidence

Listed as a hash of a modified VSIX package used in the attack

This indicator was confirmed as a true IOC by AI analysis.

Pivot to external tools

Opens in new tab · no data sent to TC

Reputation · 2

Sandbox · 4

Hybrid Analysis

Malware trackers · 3

Web search · 2

Related Clusters (1)

Trojanized Claude Code Extension Plants SSH Backdoor in Cursor Marketplace

2d ago·22 sources

Related Articles (2)

Malicious Claude Code Cursor Extension Planted SSH Backdoor

Cyberkendra·1d ago

Claude Code Extension Security Notice

cursor.com·2d ago

Related Entities

Malware Supply Chain Attack Cursor T1071 - Application Layer Protocol T1053 - Scheduled Task/Job T1098 - Account Manipulation T1543.003 - Windows Service T1021 - Remote Services T1059.001 - PowerShell MacOS OpenSSH Windows