cyber.hendryadrian.com
Security News · darkreading.com

Aokigahara Infostealer Targets AI Sessions and Developer Credentials

· Original article ↗

Summary

Check Point reports that the Windows infostealer Aokigahara steals authentication and configuration data from AI tools, developer apps and cloud services. It checks for analysis environments and encrypts stolen data before sending it to attacker-controlled servers.

Key points

  • Check Point researchers discovered Aokigahara, a Windows infostealer that also targets browsers, VPN clients, cryptocurrency wallets, password managers and email applications.
  • The malware seeks authentication files, session data and configuration files associated with AI assistants and coding tools, including Claude, ChatGPT Desktop, Cursor and GitHub Copilot.
  • It also searches for Git credentials, SSH keys, API keys and AWS, Azure and Google Cloud credentials or configuration files.
  • Aokigahara checks for virtual machines and sandboxes, then packages stolen data into encrypted ZIP archives before sending it to attacker-controlled servers.
  • Researchers warn that stolen AI sessions could expose conversation histories or uploaded files and could enable account resale or extortion; the article does not report a specific extortion incident.
  • Recommended defenses include investigating suspicious access to AI application storage, limiting long-lived secrets on endpoints, revoking exposed sessions and rotating credentials.

Article Details

Event Type
Infostealer malware targeting AI applications, developer tools, and credentials
Impact
Aokigahara scans infected Windows machines for browser and AI-session data, API keys, Git credentials, SSH keys, and cloud configuration files, then archives and encrypts stolen data before sending it to attacker-controlled servers. Stolen credentials could enable unauthorized access to AI services, code repositories, or cloud resources; the article describes resale and extortion as potential uses, not confirmed outcomes.

MITRE ATT&CK

T1497.001 · System ChecksThe malware checks for virtual machines and sandboxes to detect analysis environments.T1552.001 · Credentials In FilesThe malware searches local application and configuration files for credentials, API keys, SSH keys, and other sensitive data.T1555.003 · Credentials from Web BrowsersThe malware scans for browser passwords and session cookies.T1560 · Archive Collected DataThe malware packages stolen data into zip archives and encrypts it before sending it to attacker-controlled servers.

People

Denis CalderoneSuzu Labs chief technology officer who discussed the potential resale and extortion value of stolen AI credentials and session data.

Malware

AokigaharaResearchers from Check Point Software discovered the malware, dubbed Aokigahara after the Japanese "haunted forest" at the base of Mount Fuji, which does typical stealer things, they said in a recent report. It targets

Products

AWShave already demonstrated how they use stolen credentials for GitHub accounts, SSH private keys, and AWS, Azure, and Google Cloud credential and configuration files to infiltrate cloud environments of enterpriseAzurehave already demonstrated how they use stolen credentials for GitHub accounts, SSH private keys, and AWS, Azure, and Google Cloud credential and configuration files to infiltrate cloud environments of enterpriseChatGPT Desktopcollecting authentication files, session data, and configuration files associated with Claude, ChatGPT Desktop, Codex, Cursor, Windsurf, GitHub Copilot, Gemini CLI, and other tools, according to Check Point.ClaudeAI-driven assets, collecting authentication files, session data, and configuration files associated with Claude, ChatGPT Desktop, Codex, Cursor, Windsurf, GitHub Copilot, Gemini CLI, and other tools, according toCodexauthentication files, session data, and configuration files associated with Claude, ChatGPT Desktop, Codex, Cursor, Windsurf, GitHub Copilot, Gemini CLI, and other tools, according to Check Point.Cursorfiles, session data, and configuration files associated with Claude, ChatGPT Desktop, Codex, Cursor, Windsurf, GitHub Copilot, Gemini CLI, and other tools, according to Check Point.Gemini CLIconfiguration files associated with Claude, ChatGPT Desktop, Codex, Cursor, Windsurf, GitHub Copilot, Gemini CLI, and other tools, according to Check Point.GitHubsession data, and configuration files associated with Claude, ChatGPT Desktop, Codex, Cursor, Windsurf, GitHub Copilot, Gemini CLI, and other tools, according to Check Point.GitHub Copilotdata, and configuration files associated with Claude, ChatGPT Desktop, Codex, Cursor, Windsurf, GitHub Copilot, Gemini CLI, and other tools, according to Check Point.Google Cloudhow they use stolen credentials for GitHub accounts, SSH private keys, and AWS, Azure, and Google Cloud credential and configuration files to infiltrate cloud environments of enterprise targets.Windsurffiles, session data, and configuration files associated with Claude, ChatGPT Desktop, Codex, Cursor, Windsurf, GitHub Copilot, Gemini CLI, and other tools, according to Check Point.

Industries

TechnologyDenis Calderone, chief technology officer of security firm Suzu Labs, tells Dark Reading that "stolen AI credentials can yield a heavy harvest for an attacker. A paid AI subscription is a resellable asset, and the

Related Articles