DeepLoad exploits ClickFix and WMI persistence to steal credentials, enabling stealth reinfection after three days.
Anthropic is scrambling to contain the leak, but the AI coding agent is spreading far and wide and being picked apart.