Hudson Rock discloses Russian-language MaaS infostealer Warden v1.9 targeting Claude Code and Codex CLI credentials

Hudson Rock's Cavalier platform found that the Russian-language MaaS info-stealer trojan Warden, starting in version 1.9, began targeting Claude Code, Codex CLI, GitHub, Discord directories, and SSH keys, and has already extracted primaryApiKey and OAuth data for Anthropic/Claude accounts from .claude.json. Attackers use this to bypass web login and directly access paid AI models, organization workspaces, and source code that passed through these tools programmatically. Warden claims to use a custom morpher based on AST and LLVM IR to evade antivirus software, performs no decryption at runtime, and handles it server-side; samples are about 350kb and cover more than 360 applications across 13 categories. Developer interviews say the project began development in early 2026 and was made public on July 21; it currently has about 110 active users, with enterprise subscriptions up to $1,500 per month.