Product
Q
- First Reported
- Aug 27, 2025
- Latest Reported
- Sep 26, 2025
Reported Context (2)
- Amazon Q Developer Extension compromise Recent Malware Campaigns Use AI to Generate Commands and Search Files
- In the first phase of the attack, the malware leveraged AI command-line tools (including Claude, Gemini, and Q) to aid in their reconnaissance efforts, and then exfiltrated the stolen data to publicly accessible Malicious Nx npm Packages Steal Developer Secrets and Expose Private GitHub Repositories
Malware (2)
People (1)
MITRE ATT&CK (10)
Vendors (2)
Products (10)
Tools (2)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.