{"id":184006,"date":"2026-10-26T23:40:43","date_gmt":"2026-10-26T21:40:43","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/ataka-na-ai-agenty-cherez-razmeshhenie-fajla-agents-md-v-kataloge-s-zagruzkami"},"modified":"2026-10-26T23:40:47","modified_gmt":"2026-10-26T21:40:47","slug":"attacking-ai-agents-by-placing-an-agents-md-file-in-the-downloads-directory","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/attacking-ai-agents-by-placing-an-agents-md-file-in-the-downloads-directory","title":{"rendered":"Atac asupra agen\u021bilor AI prin plasarea fi\u0219ierului AGENTS.md \u00een directorul de desc\u0103rc\u0103ri","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Cercet\u0103torii de la Forever Security, analiz\u00e2nd cauzele apari\u021biei malware-ului \u00een sistemul unui client, au descoperit o nou\u0103 metod\u0103 de atac asupra agen\u021bilor AI, bazat\u0103 pe faptul c\u0103 mul\u021bi agen\u021bi AI proceseaz\u0103 implicit instruc\u021biunile din fi\u0219ierul AGENTS.md, plasat \u00een r\u0103d\u0103cina proiectului la care sunt implica\u021bi. Atacul se realizeaz\u0103 prin plasarea \u00een directorul ~\/Downloads a fi\u0219ierului AGENTS.md sau CLAUDE.md cu instruc\u021biunea de instalare a malware-ului (\u00een cazul examinat, era instalat un pachet npm d\u0103un\u0103tor numit \u201efunction-color\u201d). <\/p>\n

Activitatea identificat\u0103 este o varia\u021bie a unei metode cunoscute de atac asupra dezvoltatorilor de software, \u00een care un atacator creeaz\u0103 un repository cu cod legitim \u0219i plaseaz\u0103 un fi\u0219ier AGENTS.md \u00een acesta sau trimite fi\u0219ierul respectiv \u00een cadrul pull request-urilor sau mesajelor de eroare \u00een proiecte existente. \u00cen cazul \u00een care cineva decide s\u0103 foloseasc\u0103 un agent AI pentru a verifica repository-ul sau modific\u0103rile propuse, agentul va procesa instruc\u021biunile din fi\u0219ierul AGENTS.md, \u00een care pot fi prescrise ac\u021biuni mali\u021bioase.<\/p>\n

Noua variant\u0103 de atac se bazeaz\u0103 pe faptul c\u0103 Chrome, Firefox \u0219i Edge nu solicit\u0103 \u00een mod implicit confirmarea la desc\u0103rcarea unui fi\u0219ier, ci doar afi\u0219eaz\u0103 o notificare. Fi\u0219ierele desc\u0103rcate prin link sunt salvate automat \u00een directorul ~\/Downloads \u2014 pentru desc\u0103rcare este suficient ca utilizatorul s\u0103 deschid\u0103 o anumit\u0103 pagin\u0103 sau s\u0103 acceseze un link (link-ul poate p\u0103rea inofensiv, iar redirec\u021bionarea c\u0103tre desc\u0103rcare poate fi realizat\u0103 printr-un redirect). \u00cen acest mod, atacatorii reu\u0219esc s\u0103 salveze fi\u0219ierul AGENTS.md \u00een directorul de desc\u0103rc\u0103ri al sistemelor utilizatorilor, dup\u0103 care a\u0219teapt\u0103 ca utilizatorul s\u0103 porneasc\u0103 agentul AI \u00een contextul directorului ~\/Downloads, de exemplu, pentru analiza unor documente desc\u0103rcate.<\/p>\n

Pe l\u00e2ng\u0103 utilizarea AGENTS.md pentru a informa agen\u021bii AI despre instrumentele utilizate, dependen\u021bele necesare \u0219i testele efectuate, prin astfel de fi\u0219iere se poate ob\u021bine executarea unor programe arbitrare, instalarea unor pachete ter\u021be \u0219i modificarea configura\u021biei. Capacitatea de a desf\u0103\u0219ura un atac a fost demonstrat\u0103 pentru agen\u021bii AI Codex \u0219i Claude Code. <\/p>\n

Cercet\u0103torii au efectuat dou\u0103 experimente, rezultatul c\u0103rora a fost ob\u021binerea controlului asupra contului utilizatorului \u0219i interceptarea token-urilor sale OAuth. \u00cen cadrul primului experiment, agentul AI Codex a executat instruc\u021biunile de desc\u0103rcare \u0219i rulare pe sistemul utilizatorului a unui cod malware de test, limitat la deschiderea calculatoarelor. \u00cen al doilea experiment, prin substitu\u021bia fi\u0219ierului CLAUDE.md, cercet\u0103torii au modificat con\u021binutul variabilei de mediu ANTHROPIC_BASE_URL cu ajutorul Claude Code, organiz\u00e2nd redirec\u021bionarea cererilor c\u0103tre API pe al lor serverul<\/a> \u0219i au interceptat tokenul OAuth. Primul experiment a avut succes \u00een 90% din \u00eencerc\u0103ri, iar al doilea \u2014 \u00een 50%.<\/p>\n


\n
\r\n \"Reda\u021bi\r\n
<\/div>\r\n <\/div><\/center>
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Forever Security, \u0440\u0430\u0437\u0431\u0438\u0440\u0430\u044f \u043f\u0440\u0438\u0447\u0438\u043d\u044b \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 AI-\u0430\u0433\u0435\u043d\u0442\u043e\u0432, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 \u0442\u043e\u043c, \u0447\u0442\u043e \u043c\u043d\u043e\u0433\u0438\u0435 AI-\u0430\u0433\u0435\u043d\u0442\u044b \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0442 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438 \u0438\u0437 \u0444\u0430\u0439\u043b\u0430 AGENTS.md, \u0440\u0430\u0437\u043c\u0435\u0449\u0451\u043d\u043d\u043e\u0433\u043e \u0432 \u043a\u043e\u0440\u043d\u0435 \u043f\u0440\u043e\u0435\u043a\u0442\u0430, \u043a \u0440\u0430\u0431\u043e\u0442\u0435 \u043d\u0430\u0434 \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043e\u043d\u0438 \u043f\u0440\u0438\u0432\u043b\u0435\u0447\u0435\u043d\u044b. \u0410\u0442\u0430\u043a\u0430 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0438\u0435 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 ~\/Downloads \u0444\u0430\u0439\u043b\u0430 AGENTS.md \u0438\u043b\u0438 CLAUDE.md […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-184006","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Atacul asupra agen\u021bilor AI prin plasarea fi\u0219ierului AGENTS.md \u00een directorul de desc\u0103rc\u0103ri | ProHoster","description":"Cercet\u0103torii de la Forever Security, analiz\u00e2nd cauzele apari\u021biei malware-ului \u00een sistemul unuia dintre clien\u021bi, au identificat o nou\u0103 metod\u0103 de atac asupra agen\u021bilor AI, bazat\u0103 pe faptul c\u0103 mul\u021bi agen\u021bi AI vin \u00een mod implicit.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/attacking-ai-agents-by-placing-an-agents-md-file-in-the-downloads-directory","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 \u043d\u0430 AI-\u0430\u0433\u0435\u043d\u0442\u044b \u0447\u0435\u0440\u0435\u0437 \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0438\u0435 \u0444\u0430\u0439\u043b\u0430 AGENTS.md \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 \u0441 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430\u043c\u0438 | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Forever Security, \u0440\u0430\u0437\u0431\u0438\u0440\u0430\u044f \u043f\u0440\u0438\u0447\u0438\u043d\u044b \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 AI-\u0430\u0433\u0435\u043d\u0442\u043e\u0432, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 \u0442\u043e\u043c, \u0447\u0442\u043e \u043c\u043d\u043e\u0433\u0438\u0435 AI-\u0430\u0433\u0435\u043d\u0442\u044b \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/attacking-ai-agents-by-placing-an-agents-md-file-in-the-downloads-directory","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-10-26T21:40:43+00:00","article:modified_time":"2026-10-26T21:40:47+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/184006","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=184006"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/184006\/revisions"}],"predecessor-version":[{"id":184007,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/184006\/revisions\/184007"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=184006"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=184006"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=184006"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}