Unauthorized OpenAI Codex and Claude Code Relays Disable AI Sandboxes and Redirect Enterprise Data
Grey market relays install real AI tools, redirecting enterprise data and disabling sandboxes.
A grey market relay service is compromising enterprise AI tools like OpenAI Codex and Anthropic Claude Code by installing them and reconfiguring them to route all prompts, files, and login tokens through controlled servers. This service, active since early 2026, primarily targets organizations in mainland China and has affected companies across various industrial sectors. The attackers disable security features like sandboxing and telemetry, potentially exposing sensitive enterprise data.
AI summary of the linked source. Not reviewed by an editor. How this works
Run OpenAI?
Get an email when a new story names OpenAI, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonA grey market relay service has been intercepting enterprise AI tools by installing unauthorized versions of OpenAI Codex and Claude Code, then reconfiguring them to route all prompts, files, and authentication tokens through attacker-controlled servers. The attackers deliberately disable sandboxing and telemetry, stripping away the very security controls designed to contain AI tool behavior and alert defenders. This matters because affected organizations lose visibility into what data is leaving their environment while simultaneously exposing credentials and proprietary files to a third party. The targeting of industrial-sector companies in mainland China suggests deliberate economic espionage motives, amplifying the potential business and regulatory impact.
What helps against this
How we list vendors- Secrets management
API keys, tokens and passwords stop leaking from code, chat and configuration files.
- Device management (MDM and UEM)
Every company laptop and phone is known, encrypted, locked down and up to date.
- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- domain — vibe.aiok[.]me