BeepRAT/MCP AWS Credential Theft via IDE MCP Server Process Spawn

Ibrahim Saud@tektrix

•updated Jun 30, 2026•0•0•7

Detects suspicious child processes spawned by AI-powered IDE assistants (e.g., Amazon Q, Claude Code, Cursor) that perform AWS credential inspection combined with network exfiltration commands. This activity is indicative of exploitation of IDE extension vulnerabilities (e.g., CVE-2026-12957) where malicious configuration files force the IDE to spawn shell processes to steal and transmit cloud environment credentials.