Becoming Claude: Compromising Claude for Credentials and More

Claude is Anthropic’s flagship product in the agentic workflow space. Claude can now integrate with user's browsers through Chrome extensions, allowing Claude to fully control Chrome. This new innovation presents a juicy attack surface for attackers targeting web-based solutions like Cloud and SaaS platforms. We will cover in-depth how this extension works and how to abuse it to steal user credentials, control browsers, and socially engineer users.