GoKawiilUnauthorized relay service installs modified OpenAI Codex, Claude Code tools, disabling safety settings
Symantec's Threat Hunter Team identified a relay service that has been installing genuine OpenAI Codex and Anthropic Claude Code command-line tools on enterprise systems since early 2026, primarily in mainland China, South Korea, Taiwan, and Malaysia. The service reroutes AI requests through its own infrastructure instead of OpenAI's or Anthropic's servers and disables built-in security safeguards, though researchers have not found evidence of malware or active exploitation yet.
GoKawiil's interpretation of the reporting above, not reported fact.
The relay appears to let organizations in regions without official access use US AI tools, but stripping security protections could expose those enterprises to unknown risks even without current malicious activity. Symantec's researchers say the motive for disabling safeguards is unclear, which suggests this could evolve into a more serious threat vector if attackers exploit the weakened configurations. The discovery also highlights how gray-market AI tool distribution can introduce supply-chain security gaps that neither the AI vendors nor the customer organizations may be monitoring.
- A relay service has installed genuine but reconfigured Codex and Claude Code CLIs at roughly a dozen organizations since early 2026.
- Affected organizations are mainly in mainland China, with others in South Korea, Taiwan, and Malaysia.
- The relay disables security safeguards and reroutes traffic through its own infrastructure, creating risk even though no malware has been confirmed yet.
Source: darkreading.com — Rob Wright, 2026-10-29
Published there as: “Shadowy AI Relay Disables OpenAI Codex, Claude Code Sandboxes”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.