Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
4 IOCs
Living off the coding agent: Two tales of tunnels and LaunchAgents
Threat Actors
Excerpt
Coding agents such as Claude Code and Cursor are vendor-signed, used all day on developer laptops, and routinely open shells, call APIs, edit files, and install helpers. That makes GenAI-adjacent alerts challenging to investigate. The parent looks trusted, while the children can still look a lot like classic high-severity activity. This article walks through one of those windows. On a macOS endpoint, Elastic Security endpoint telemetry showed shells under Claude Code that…
Read the original report →Diamond Model
Adversary(1)
Infrastructure(3)
Capability
Victim
Indicators of Compromise
Open the mindmap →4 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | localhost.run | High | Score 58/100 | First seen |
| Domain | lhr.life | High | Score 58/100 | First seen |
| Domain | alocalhost.run | High | Score 58/100 | First seen |
| SHA256 | d335a47a04dde726897a2e753187e9f48fbf40616c48be3266954c7b9175a09e | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…