Claude Desktop

Reported Context (3)

Figure 1. Share of agent tool machines running each tool.One tool leads by a wide margin: Claude Desktop (26.6%), a general-purpose AI desktop app. Visual Studio Code, a popular free code editor, is in second place Acronis Data Shows AI Agent Use Across MSP and SMB Endpoints
Claude Desktop — .config/Claude/claude_desktop_config.json, .claude.json Compromised Jscrambler npm Releases Deliver Cross-Platform Infostealer
passwords, CI/CD secrets, VPN configs, and credential files for eight AI coding tools, including Claude Desktop, Cursor, VS Code, Codeium, Continue, Zed, Opencode, and Kilo, the module performs four additional TeamPCP Python Toolkit Uses FIRESCALE and Victim GitHub Accounts to Survive C2 Disruption

Malware (1)

People (1)

Threat Actors (1)

MITRE ATT&CK (32)

Vendors (7)

Products (74)

Tools (1)

Industries (2)

Countries (23)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.