Malicious Claude Code Extension PowerShell OpenSSH Installation
Detects PowerShell attempting to install and start the OpenSSH Server on Windows, typically triggered by malicious extensions or backdoors to enable remote SSH access.
Cortex XDR
Detects PowerShell attempting to install and start the OpenSSH Server on Windows, typically triggered by malicious extensions or backdoors to enable remote SSH access.
Already have an account?