Infostealer Logs Expose Replayable AI Tokens That Can Bypass MFA
Summary
Okta analyzed a 7 GB infostealer dump containing AI-service tokens and API keys, including unexpired credentials that could enable account access by replaying tokens. Stolen AI access is also being sold for LLMjacking and other abuse.
Key points
- Okta said a 7 GB dump released on Telegram contained data from 5,871 infected machines across 162 countries.
- The dataset included 555 JWTs likely tied to AI-service authentication and 1,843 unexpired JWTs and JWEs; replayed tokens may bypass passwords and MFA.
- Okta found 24 still-valid API keys for Google Gemini, OpenAI, Groq, and OpenRouter, which could be abused for espionage, extortion, or resource theft.
- The dump’s JWTs included plaintext personal information in 17.7% of cases, potentially aiding social engineering or phishing.
- Cybercriminals are selling access to AI accounts and tools on underground forums and Telegram; the article describes this abuse as LLMjacking.
- IP allowlisting may limit some session-replay attacks, while Google’s Device Bound Session Credentials bind Chrome session tokens to a device.
- The article recommends monitoring for session-token reuse, scoping API keys, using short-lived OAuth 2.0 tokens, and adopting phishing-resistant authentication.
Article Details
- Event Type
- Cybercriminals are using infostealer logs to steal and replay AI-service session tokens, JWTs, JWEs, and API keys, enabling unauthorized account access and LLMjacking.
- Impact
- The analyzed 7 GB dump reportedly contained data from 5,871 infected machines across 162 countries, including unexpired authentication tokens and 24 valid API keys for four AI-related services. Stolen access can bypass password and MFA protections and enable espionage, extortion, resource theft, and unauthorized compute use. The article also reports exposure of plaintext personally identifiable information in some JWTs.
MITRE ATT&CK
People
Malware
Vendors
AmazonAmong those were thousands of unexpired authentication tokens corresponding to services like Google, Microsoft, Anthropic, Amazon, Gamma, Notion, Character.ai, Cursor, Poe.com, and Pika AI.AnthropicCybercriminals are using information stealer logs to hijack AI accounts and replay stolen session tokens, JWTs, JWEs, and API keys from providers such as Google, Anthropic, OpenAI, and others.GoogleCybercriminals are using information stealer logs to hijack AI accounts and replay stolen session tokens, JWTs, JWEs, and API keys from providers such as Google, Anthropic, OpenAI, and others.GroqValid API keys for Google Gemini, OpenAI, Groq, and OpenRouter were also found.MicrosoftAmong those were thousands of unexpired authentication tokens corresponding to services like Google, Microsoft, Anthropic, Amazon, Gamma, Notion, Character.ai, Cursor, Poe.com, and Pika AI.Oktathose secrets and bypass credential-based authentication,” Jeremy Kirk, director of threat intelligence at Okta, said in a report shared with The Hacker News.OpenAICybercriminals are using information stealer logs to hijack AI accounts and replay stolen session tokens, JWTs, JWEs, and API keys from providers such as Google, Anthropic, OpenAI, and others.OpenRouterValid API keys for Google Gemini, OpenAI, Groq, and OpenRouter were also found.
Products
Character.aiAmong those were thousands of unexpired authentication tokens corresponding to services like Google, Microsoft, Anthropic, Amazon, Gamma, Notion, Character.ai, Cursor, Poe.com, and Pika AI.ChatGPT#LummaStealerClaude#LummaStealerCursor#LummaStealerDevinPosts on these forums have indicated buyer demand for Claude and Gemini credentials, in conjunction with autonomous coding IDEs like Cursor Pro and Devin.Google ChromeIn addition, Google has added support for Device Bound Session Credentials (DBSC) to Chrome to cryptographically link a session token to a device so that a stolen token cannot be used on another system.Google GeminiValid API keys for Google Gemini, OpenAI, Groq, and OpenRouter were also found.NextAuth.jsMost of these tokens are said to have been set by OpenAI, which uses NextAuth.js.NotionAmong those were thousands of unexpired authentication tokens corresponding to services like Google, Microsoft, Anthropic, Amazon, Gamma, Notion, Character.ai, Cursor, Poe.com, and Pika AI.Pika AIAmong those were thousands of unexpired authentication tokens corresponding to services like Google, Microsoft, Anthropic, Amazon, Gamma, Notion, Character.ai, Cursor, Poe.com, and Pika AI.Poe.comAmong those were thousands of unexpired authentication tokens corresponding to services like Google, Microsoft, Anthropic, Amazon, Gamma, Notion, Character.ai, Cursor, Poe.com, and Pika AI.
Tools
Camoufox“Other tools, such as the open-source anti-detect browser Camoufox or the automation tool SeleniumBase, can load data stolen from a browser’s sessionStorage and localStorage easily from a file.SeleniumBase“Other tools, such as the open-source anti-detect browser Camoufox or the automation tool SeleniumBase, can load data stolen from a browser’s sessionStorage and localStorage easily from a file.TruffleHogBesides credentials and tokens, an analysis of the stealer dump using TruffleHog has unearthed 24 still-valid API keys for four AI-related services, such as Google Gemini, OpenAI, Groq, and OpenRouter.