Elastic报告称黑客滥用ChatGPT与Claude Code进行网络入侵
Start here
2026年11月5日，Elastic Security发布威胁研究报告披露，网络攻击者正转变手段，在真实网络入侵中滥用拥有合法签名的AI编码助手（如ChatGPT桌面端与Claude Code）以及远程管理工具。攻击者利用这些合法工具在受害系统中维持持久的交互式访问，从而实现在不使用传统恶意软件情况下的无恶意软件入侵活动。目前该报告揭示了AI开发辅助工具被黑客用于维持长期访问的新型威胁面。
AI-generated from reports · Updated 3 hours ago
Report timeline
Follow the reports to see different sides of the story.
- Hacker News · AISelectedElastic report highlights threat actors abusing ChatGPT desktop and Claude Code in real-world breaches
A threat research report by Elastic Security reveals that attackers are turning to legitimately signed AI coding assistants—such as the ChatGPT desktop app and Claude Code—alongside remote management tools to maintain persistent interactive access, enabling malware-free intrusions.
Story heat trend
Current heat 9·Comparable peak 10（Nov 5 09:00）·Comparable change, last 24 hours–
Trends compare only the same parties observed continuously, so the scope can be narrower than current heat counts. Move the pointer or tap the chart to see hourly heat; use the left and right arrow keys on a keyboard.