Hades Campaign Decoy Anthropic API Traffic

Duo Tech@duotech

•updated Jun 9, 2026•0•0•3

Detects suspicious network connections to a non-existent Anthropic API endpoint (api.anthropic.com/v1/api). This specific route is used as network camouflage and decoy traffic by the Hades PyPI supply chain malware campaign.