Recent news from anthropic claude code ai agent discovering hidden cryptocurrency miner on users Mac indicates active security monitoring being run by the software. This is relevant as it shows how ai coding agents can detect and solve advanced malware infestations that users may not find and fix using their normal intuition. This is a real-world example of ai agents in action (other than just generating code) in the context of security.
AI agent isolates XMRig malware consuming 1175 percent of CPU
A user on reddit (untilhex) created a temperature monitor app to attempt to troubleshoot continuous overheating on their device. They reached out to claude code to try and get a better understanding of why the system was behaving so erratically. Using claude code as an ai agent for analysis of the system state, it was determined that cpu temps were up to 112 degrees celsius because of constantly high load on the system.
After analysis from claude code, they found it to be malware of the xmrig type. A crypto miner, taking up roughly 1175% cpu (or 12 cores running full tilt). Claude code helps by isolating the malicious files, and removing ability for the miner to load upon startup. User performed a malwarebytes scan to verify successful removal and ensured system cleanliness.
Direct quotes during the interaction show the seriousness of the issue – claude code states that a crypto miner being installed is running on mac. The user comments that "no wonder why the mac is so terrible right now"
This comes after we saw some claude code windows app behaviour stories. And tracked down similar resource issues on other platforms.
The user was able to confirm the ability of claude code to actively monitor and help with removal of hidden malware on the macos platform. The high cpu usage, from xmrig, was successfully detected, and the user is now back up and running as normal. For anyone looking for an example of ai-based security troubleshooting, this gives a great idea of the capabilities of the tool in action.
Discussion
0 comments
Log in to join the thread with a thoughtful take, question, or correction.