{"id":184006,"date":"2026-10-26T23:40:43","date_gmt":"2026-10-26T21:40:43","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/ataka-na-ai-agenty-cherez-razmeshhenie-fajla-agents-md-v-kataloge-s-zagruzkami"},"modified":"2026-10-26T23:40:47","modified_gmt":"2026-10-26T21:40:47","slug":"attacking-ai-agents-by-placing-an-agents-md-file-in-the-downloads-directory","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/attacking-ai-agents-by-placing-an-agents-md-file-in-the-downloads-directory","title":{"rendered":"R\u00fcnnak AI-agendidele l\u00e4bi AGENTS.md faili paigutamise allalaadimiste katalooge.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Forever Security'i teadlased paljastasid uue r\u00fcnnaku meetodi AI-agentele, uurides, kuidas pahavara sattus \u00fche kliendi s\u00fcsteemi. Paljusid AI-agente k\u00e4sitletakse vaikimisi AGENTS.md faili kaudu, mis asub projekti juures. R\u00fcnnak toimub, kui AGENTS.md v\u00f5i CLAUDE.md fail paigutatakse katalooge ~\\\/Downloads, sisaldades pahavara installimise juhist (antud juhul installiti pahatahtlik npm-pakett 'function-color'). <\/p>\n

Tuvastatud tegevus on variatsioon tuntud r\u00fcnnakumeetodist tarkvaraarendajate suhtes, kus kurjategija loob repositooriumi legitiimse koodiga ja paigutab sinna faili AGENTS.md v\u00f5i edastab selle faili osana pull-pakkumistest v\u00f5i vigade aruannetest olemasolevatesse projektidesse. Juhul kui keegi otsustab kasutada AI-agentide kontrollimiseks soovitatud repositooriumi v\u00f5i muudatust, t\u00f6\u00f6tleb agent juhiseid failist AGENTS.md, milles v\u00f5ivad olla ette n\u00e4htud kahjulike toimingute tegemine.<\/p>\n

Uus r\u00fcnnaku variant p\u00f5hineb asjaolul, et Chrome, Firefox ja Edge ei palu vaikimisi faili allalaadimisel kinnitust, vaid n\u00e4itavad lihtsalt teadet. Allalaaditavad failid salvestatakse automaatselt katalooge ~\\\/Downloads \u2014 piisab, kui kasutaja avab teatud lehe v\u00f5i kl\u00f5psab lingile (link v\u00f5ib tunduda s\u00fc\u00fctu, kuid allalaadimist v\u00f5ib suunata \u00fcmberkasutuse kaudu). Sellisel viisil saavutavad r\u00fcndajad, et fail AGENTS.md salvestatakse kasutaja allalaadimiste katalooge, p\u00e4rast mida ootavad nad, et kasutaja k\u00e4ivitaks AI-agendi kataloogis ~\\\/Downloads, n\u00e4iteks m\u00f5nede allalaaditud dokumentide anal\u00fc\u00fcsimiseks.<\/p>\n

Peale AGENTS.md kasutamise, et informeerida AI-agente kasutatavatest t\u00f6\u00f6riistadest, vajalike s\u00f5ltuvustest ja teostatavatest testidest, on selliste failide kaudu v\u00f5imalik saavutada ka suvaliste programmide v\u00e4ljakutsumine, kolmandate osapoolte paketide installimine ja konfiguratsiooni muutmine. R\u00fcnnaku v\u00f5imalust on demonstreeritud AI-agentide Codex ja Claude Code puhul. <\/p>\n

Uurijad viisid l\u00e4bi kaks eksperimenti, mille tulemuseks saadi kontroll kasutajakonto \u00fcle ja saadi k\u00e4tte tema OAuth tokenid. Esimeses eksperimendis t\u00e4itis AI-agent Codex juhiseid, laadides ja k\u00e4ivitades kasutaja s\u00fcsteemis katsev\u00f5rgu koodi, mis piirdus kalkulaatori avamisega. Teises eksperimendis muutis uurijad oma CLAUDE.md faili asendamistehnikaga muutuja keskkonna ANTHROPIC_BASE_URL sisu, korraldades API p\u00e4ringute \u00fcmbersuunimise enda kasuks. server<\/a> ja p\u00fc\u00fcdsid OAuth identiteedi\u00fchendust. Esimene katse \u00f5nnestus 90% juhtudest ja teine \u2014 50%.<\/p>\n


\n
\r\n \"M\u00e4ngi\r\n
<\/div>\r\n <\/div><\/center>
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Forever Security, \u0440\u0430\u0437\u0431\u0438\u0440\u0430\u044f \u043f\u0440\u0438\u0447\u0438\u043d\u044b \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 AI-\u0430\u0433\u0435\u043d\u0442\u043e\u0432, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 \u0442\u043e\u043c, \u0447\u0442\u043e \u043c\u043d\u043e\u0433\u0438\u0435 AI-\u0430\u0433\u0435\u043d\u0442\u044b \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0442 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438 \u0438\u0437 \u0444\u0430\u0439\u043b\u0430 AGENTS.md, \u0440\u0430\u0437\u043c\u0435\u0449\u0451\u043d\u043d\u043e\u0433\u043e \u0432 \u043a\u043e\u0440\u043d\u0435 \u043f\u0440\u043e\u0435\u043a\u0442\u0430, \u043a \u0440\u0430\u0431\u043e\u0442\u0435 \u043d\u0430\u0434 \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043e\u043d\u0438 \u043f\u0440\u0438\u0432\u043b\u0435\u0447\u0435\u043d\u044b. \u0410\u0442\u0430\u043a\u0430 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0438\u0435 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 ~\/Downloads \u0444\u0430\u0439\u043b\u0430 AGENTS.md \u0438\u043b\u0438 CLAUDE.md […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-184006","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47AI-agentide r\u00fcnnak l\u00e4bi AGENTS.md faili paigutamise allalaadimiskausta | ProHoster","description":"Forever Security'i uurijad, anal\u00fc\u00fcsides pahatahtliku tarkvara ilmumise p\u00f5hjuseid \u00fche kliendi s\u00fcsteemis, tuvastasid uue r\u00fcnnakumeetodi AI-agentide vastu, mis p\u00f5hineb paljude AI-agentide vaikeseadetel.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/attacking-ai-agents-by-placing-an-agents-md-file-in-the-downloads-directory","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 \u043d\u0430 AI-\u0430\u0433\u0435\u043d\u0442\u044b \u0447\u0435\u0440\u0435\u0437 \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0438\u0435 \u0444\u0430\u0439\u043b\u0430 AGENTS.md \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 \u0441 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430\u043c\u0438 | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Forever Security, \u0440\u0430\u0437\u0431\u0438\u0440\u0430\u044f \u043f\u0440\u0438\u0447\u0438\u043d\u044b \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 AI-\u0430\u0433\u0435\u043d\u0442\u043e\u0432, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 \u0442\u043e\u043c, \u0447\u0442\u043e \u043c\u043d\u043e\u0433\u0438\u0435 AI-\u0430\u0433\u0435\u043d\u0442\u044b \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/attacking-ai-agents-by-placing-an-agents-md-file-in-the-downloads-directory","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-10-26T21:40:43+00:00","article:modified_time":"2026-10-26T21:40:47+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/184006","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=184006"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/184006\/revisions"}],"predecessor-version":[{"id":184007,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/184006\/revisions\/184007"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=184006"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=184006"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=184006"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}