CYBERSECURITYTRACKER
Permanent story citation

Threat Actors Are Posing as OpenAI, Anthropic and DeepSeek to Target Credentials and Secrets

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 5331

As cited

Copy frozen at (site build).

threat intel

Threat Actors Are Posing as OpenAI, Anthropic and DeepSeek to Target Credentials and Secrets

Threat actors are operating automated scanners that impersonate the web crawlers of major artificial intelligence (AI) companies and Fortune 500 firms by spoofing user agents. These scanners target misconfigured web servers to access sensitive files that commonly leak secrets and credentials.

Why it matters: Organizations running public-facing web services need to verify crawler authentication and audit web server configurations today, as credential and secrets exposure could grant attackers direct access to systems and data.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary