Grey market relay service disables OpenAI Codex and Claude Code sandboxes and reroutes enterprise data

Symantec's Threat Hunter Team identified a relay service active since at least early 2026 that has touched about a dozen organisations, mostly in mainland China. Users install the genuine Codex or Claude Code tool, then run a fileless setup script from a lookalike domain that rewrites the config to point at relay servers, stores the relay key as a user-level variable, sets sandbox mode to danger-full-access, enables network access and turns off telemetry. This is not a flaw in either product, but the relay can see every prompt, file and secret and could alter replies to run commands with the user's rights. No such abuse was observed.

For IT people · Written by AI from 2 sources · Wrong?