As cited
Copy frozen at (site build).
threat intel
Infostealer riding the AI Train
Aokigahara, a newly discovered infostealer malware, combines traditional data-theft capabilities with dedicated targeting of artificial intelligence (AI) applications and developer tools including Claude, ChatGPT Desktop, GitHub Copilot, and cloud credential stores. The malware steals authentication files, session tokens, and configuration data from AI services and development environments, alongside browser credentials, cryptocurrency wallets, and other sensitive information. Operators could monetize stolen AI credentials through unauthorized access to paid services, account resale, or data extortion involving confidential business information or source code shared with AI services.
Why it matters: Developers and organizations using AI services face exposure of paid-service credentials and private conversation histories; IT teams managing Windows endpoints must monitor for this malware and treat AI application authentication as a critical asset requiring the same protection as cloud and SSH credentials.
- Source published
- First seen by Cybersecurity Tracker