{"type":"post","id":"markdown-is-the-new-executable-attackers-are-dropping-7ad00f","slug":"markdown-is-the-new-executable-attackers-are-dropping-7ad00f","title":"Markdown Is the New Executable: Attackers Are Dropping Agent Instructions Into Your Downloads Folder From the Web","description":"Forever Security says it found a malicious AGENTS.md in a customer’s Downloads folder and traced it to an agent being directed to install malware.","retrieval_nugget":"Forever Security says it found a malicious AGENTS.md in a customer’s Downloads folder and traced it to an agent being directed to install malware. The firm reproduced related attack chains against Codex and Claude Code, showing how ordinary instruction files can become an execution path when agents trust the folder they open.","published_at":"2026-11-06","updated_at":"2026-11-07","record_date":"2026-11-06","date_kind":"published_at","topics":["codex","claude","claude-code"],"entities":["Forever Security","Codex","Claude Code","OpenAI","Anthropic","function-color"],"related_patterns":["agent-security-moves-to-runtime-boundaries"],"novelty_label":"same_event","prior_refs":[],"source_url":"https://forever.security/blog/hijacking-ai-agents-via-downloads-folder","source_urls":["https://forever.security/blog/hijacking-ai-agents-via-downloads-folder"],"schema_version":"newruntime-agent-readable-v0.2","stable_id":"post:markdown-is-the-new-executable-attackers-are-dropping-7ad00f","status":"published","visuals":[],"editor":{"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]},"routes":{"html":"https://newruntime.com/posts/markdown-is-the-new-executable-attackers-are-dropping-7ad00f/","markdown":"https://newruntime.com/posts/markdown-is-the-new-executable-attackers-are-dropping-7ad00f.md","json":"https://newruntime.com/posts/markdown-is-the-new-executable-attackers-are-dropping-7ad00f.json"},"markdown_url":"https://newruntime.com/posts/markdown-is-the-new-executable-attackers-are-dropping-7ad00f.md","next_reads":[{"type":"topic","path":"/topics/codex/","url":"https://newruntime.com/topics/codex/","title":"Codex","reason":"Explore the codex topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/codex.md","json_url":"https://newruntime.com/topics/codex.json"},{"type":"topic","path":"/topics/claude/","url":"https://newruntime.com/topics/claude/","title":"Claude","reason":"Explore the claude topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/claude.md","json_url":"https://newruntime.com/topics/claude.json"},{"type":"topic","path":"/topics/claude-code/","url":"https://newruntime.com/topics/claude-code/","title":"Claude Code","reason":"Explore the claude-code topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/claude-code.md","json_url":"https://newruntime.com/topics/claude-code.json"},{"type":"collection","path":"/posts/","url":"https://newruntime.com/posts/","title":"Field Notes","reason":"Open the latest editorial analysis.","media_type":"text/html","json_url":"https://newruntime.com/posts.json"},{"type":"collection","path":"/sources/","url":"https://newruntime.com/sources/","title":"Sources","reason":"See the original sources this archive cites.","media_type":"text/html"}]}