Malicious Browser Extensions Can Use Claude Dispatch to Run Code on PCs
Original headline: Malicious Browser Extensions Could Use Claude Dispatch to Run Code on Users' Computers
Researchers at Forever Security demonstrated that a malicious browser extension capable of sending scripts to claude.ai can cause Claude Desktop to execute code on a victim’s computer. The attack leverages Claude’s Dispatch feature, which allows tasks to be sent from a phone to the desktop, and the vulnerability remains exploitable.
Exploiting AI desktop via browser extensions can give attackers remote code execution on user PCs.
Research angleHow does the use of Claude Dispatch affect users’ security perceptions? — Protection Motivation Theory
Turn this security issue into a research project
HJITM works with researchers from study design through surveys, analysis and submission to international journals in generative AI and technology management. Bring us your research question.
This item is an AI-generated summary of reporting by The Hacker News. Please check the original article for accuracy. Copyright in the original article belongs to The Hacker News.