Kaspersky Threat Research has revealed its analysis of RenEngine, a malware loader that has recently gained public attention.
The module targets Claude Code, Claude Desktop, Cursor, Microsoft Visual Studio Code (VS Code) Continue, and Windsurf. It also harvests API keys for nine large language models (LLM) providers: ...