{
  "schema_version": "1.6.0",
  "id": "ACVE-2026-0417",
  "aliases": [],
  "modified": "2026-09-20T00:00:00Z",
  "summary": "Claude Fraud fake extensions steal developer sessions and wallets",
  "details": "## What\n\nThe Claude Fraud campaign used fake Claude.ai and Claude Code pages, malicious VS Code extensions, and advertising lures to deliver MacSync on macOS and PowerShell on Windows. The cited source reports 15,600 or more victims and three true positives at a large technology company.\n\n## Which configuration is exposed\n\nThe exposed configuration installs or enables an extension posing as a Claude Code plugin in the VS Code marketplace context. Extension code can read keychains, browser sessions, wallets, and project data, so the package boundary is the relevant condition rather than an agent model setting.\n\n## How ACVE detects it\n\nACVE matches a plugin named claude-code with marketplace vscode. It does not inspect publisher identity, extension bytes, or host infection state. The finding is a supply-chain review signal and should be paired with endpoint telemetry.\n\n## Fix\n\nRemove the fake extension, revoke browser and keychain sessions, rotate wallets and developer credentials, and inspect for MacSync or PowerShell persistence. Install extensions only from a verified publisher and retain their resolved version or hash.\n\n## Grounding needed\n\nThe 7AI campaign page should be checked for victim figures and extension details. The record keeps the documented count and separates it from the number of local hosts that merely use VS Code.\n\nThis record is limited to the condition named in the public source: Claude Fraud fake extensions steal developer sessions and wallets. A match is a review signal for that condition, not a claim that every installation, package, model, or host was compromised. Operators should preserve the resolved evidence and investigate adjacent credentials, network exposure, and execution history before closing the finding. The result should be retained with the lock snapshot used for the match so later review can distinguish configuration drift from a changed public record.",
  "affected": [
    {
      "package": {
        "ecosystem": "AgentPlugin",
        "name": "claude-code@vscode"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ]
    }
  ],
  "database_specific": {
    "severity": "CRITICAL",
    "acve": {
      "specVersion": 1,
      "status": "candidate",
      "kind": "code",
      "vulnClasses": [
        "supply-chain",
        "credential-theft"
      ],
      "cwe": [
        "CWE-522"
      ],
      "exploitation": {
        "status": "exploited-itw",
        "checkedAt": "2026-09-20T00:00:00Z",
        "sources": [
          {
            "url": "https://blog.7ai.com/claude-fraud-malware-campaign-ai-developer-tools",
            "type": "vendor"
          }
        ],
        "kev": {
          "listed": false
        },
        "first_seen": "2026-03-17",
        "last_seen": "2026-03-17",
        "victims": {
          "count": 15600,
          "range": "15,600+ documented victims; 3 true positives at one large technology company",
          "sectors": [
            "software"
          ],
          "evidence": "7AI described fake Claude pages and extensions delivering MacSync and PowerShell stealers."
        },
        "attribution": "unattributed"
      },
      "cveBoundary": "supply-chain",
      "matcher": {
        "some": "plugins",
        "where": {
          "all": [
            {
              "field": "name",
              "op": "eq",
              "value": "claude-code"
            },
            {
              "field": "marketplace",
              "op": "eq",
              "value": "vscode"
            }
          ]
        }
      },
      "fix": {
        "summary": "Remove fake Claude extensions and rotate endpoint credentials.",
        "actions": [
          {
            "type": "remove",
            "target": "AgentPlugin:claude-code@vscode"
          },
          {
            "type": "reconfigure",
            "target": "plugins",
            "why": "Install only verified extensions."
          }
        ]
      },
      "noCveReason": "No CVE assigned; this record describes a configuration or supply-chain condition.",
      "grounding": {
        "itw": {
          "checkedAt": "2026-09-20T16:26:31Z",
          "sources": [
            {
              "url": "https://blog.7ai.com/claude-fraud-malware-campaign-ai-developer-tools",
              "status": 200,
              "contentType": "text/html; charset=UTF-8",
              "sha256": "sha256:ab4e83de85962eeb8513c244c1982364f46a8c2c7be68612a01a243d783db618",
              "type": "vendor"
            }
          ],
          "kev": {
            "listed": false
          }
        }
      }
    }
  }
}