The loader presents an apparently legitimate setup experience by running a genuine Claude installer while arranging a separate scheduled background task. The described malicious path uses headless Edge with remote debugging and submits browser cookie and extension data to an operator-controlled endpoint. The user's visual confirmation of a real installation…
Inspect the ClaimsCase · DiggingBeagle record
Trojanized Claude installer runs genuine software while stealing Edge session data
The analyzed loader runs a real Claude installer in the foreground, sets a scheduled background headless-Edge task, and posts browser data to a suspicious backend.
Scope
Trojanized desktop installer and session extraction
Assessment profile
Assessment method- Setting
- research demonstration
- Exploitation
- demonstrated
- AI role
- AGAINST AI
Basis and provenance
Assessment is limited to the selected canonical Claims and their Source locators in knowledge revision 152. Primary public URL retrieval was unavailable during this drafting pass, and the pinned index reports incomplete linked-record coverage without identifying missing IDs. No independent production impact, generalized exploit prevalence, or attributable victim count is inferred. Case setting is research_demonstration; evidence status records only the documented source-reported result, not external replication.
Assessed Oct 15, 2026 using diggingbeagle.assessment/1.
Evidence basis: CLM-2026-CLAUDE-COOKIE-STEALER-01 · ANY.RUN: counterfeit AI products and malicious onboarding campaigns
At a glance
No independently measured downstream account reuse or count of compromised users was supplied.
Limits and uncertaintyFull account
The loader presents an apparently legitimate setup experience by running a genuine Claude installer while arranging a separate scheduled background task. The described malicious path uses headless Edge with remote debugging and submits browser cookie and extension data to an operator-controlled endpoint. The user's visual confirmation of a real installation would not validate the authenticity of the wrapper that started it.
This is software-distribution abuse exploiting AI-product recognition, not a documented flaw in Claude's inference system. The source provides a sandboxed execution chain but no independently verified count of stolen sessions or confirmed account reuse. It is distinct from a fake download page that asks a user to run a clipboard command manually.
Claims & evidence
CLM-2026-CLAUDE-COOKIE-STEALER-01ANY.RUN describes a fake Claude setup program creating a scheduled task that launches headless Edge with remote debugging and posts cookie and extension data to an operator backend.supported
Basis: reported finding
- supportsANY.RUN: counterfeit AI products and malicious onboarding campaignsprimary disclosure
Section A Real Claude Installer and a Stolen Session
Unknowns and contradictions
- No independently measured downstream account reuse or count of compromised users was supplied.
Sources and citation
Material revision history
- Oct 15, 2026 · Canonical change recorded · new in release · revision 153