Threat Research · research.checkpoint.com

Aokigahara Infostealer Targets AI Credentials and Developer Environments

Oct 23, 2026 · Original article ↗

Summary

Check Point Research details Aokigahara, an infostealer targeting AI sessions, developer secrets and cloud credentials alongside traditional account data. The analysis describes anti-analysis checks and encrypted C2 uploads; operators’ monetization remains unconfirmed.

Key points

Aokigahara has been observed in the wild; an earlier version may have been known as Kamidere or Stygian.
A dedicated handler targets authentication files, session data and configuration files for tools including Claude, ChatGPT Desktop, Codex, Cursor, Windsurf, GitHub Copilot and Gemini CLI. Not every targeted file necessarily contains secrets.
Other collection targets include Git credentials, files under .ssh that may contain private keys, and AWS, Azure and Google Cloud credentials and configuration.
The stealer also collects browser credentials and cookies, wallet data, clipboard contents, screenshots, and files from messaging, gaming, password-manager, VPN, FTP and email applications.
When enabled by configuration, its anti-analysis checks include debugger, virtual machine, sandbox, language, and system-environment checks.
The analysis describes X25519 key exchange and AES-GCM-encrypted ZIP uploads to C2 endpoints; it also details AES-256-CBC decryption of the malware configuration.
Stolen sessions or credentials could enable unauthorized service use or access to sensitive data, but the article does not confirm how operators monetize stolen information.

Article Details

Attack Vectors: Aokigahara collects browser credentials and cookies, application session data, and files associated with AI and development tools.
It targets Git credential files, SSH-related files that may contain private keys, and AWS, Azure, and Google Cloud credential and configuration files.
It captures screenshots and clipboard contents and collects files from user Desktop, Documents, and Downloads directories.
The malware uploads collected data as ZIP archives to configured C&C endpoints using HTTP POST requests; the uploads are encrypted with AES-256-GCM.
Configured anti-analysis checks can stop execution based on language settings or indicators of debugging, virtual machines, and sandbox environments.
Defensive Notes: Treat AI application credentials and session data as sensitive assets alongside browser sessions, cloud credentials, and developer keys.

Indicators of compromise

Type	Indicator	Context
DOMAIN	`dfwioeiofwr[.]info`	Domain listed as Aokigahara C&C infrastructure.
DOMAIN	`dobeqnesmot[.]cc`	Domain listed as Aokigahara C&C infrastructure.
DOMAIN	`gate[.]dfwioeiofwr[.]info`	C&C hostname listed for Aokigahara.
DOMAIN	`hjazfioe[.]surf`	Domain listed as Aokigahara C&C infrastructure.
DOMAIN	`kkeyyou[.]cc`	Domain listed as Aokigahara C&C infrastructure.
DOMAIN	`neihite[.]cc`	Domain listed as Aokigahara C&C infrastructure.
DOMAIN	`somelitersofblood[.]pw`	Domain listed as Aokigahara C&C infrastructure.
IPV4	`2[.]26[.]252[.]48`	Aokigahara C&C server IP, listed with port 8080.
SHA1	`007137599bc4d69ee952a5228b5fcb2c3b9a95a7`	Aokigahara sample SHA-1 listed in the article's indicators of compromise.
SHA1	`0c46ac5555cf8f305c1345a21d0802c52bf52cd8`	Aokigahara sample SHA-1 listed in the article's indicators of compromise.
SHA1	`151d8013ca3ab3dab9cd37f4ed9870cc83e87a77`	Aokigahara sample SHA-1 listed in the article's indicators of compromise.
SHA1	`244371fc1642f0548b807b0a4a2e7ea5d7b4c82a`	Aokigahara sample SHA-1 listed in the article's indicators of compromise.
SHA1	`2f30b116ca3dc48ff5783c3bb7391d671866e27b`	Aokigahara sample SHA-1 listed in the article's indicators of compromise.
SHA1	`3586eeaf3ffe2c3a4f1d005aee863b7aee7cc7bd`	Aokigahara sample SHA-1 listed in the article's indicators of compromise.
SHA1	`426bea548a24f7f39c279770b5dd21fbed7f7328`	Aokigahara sample SHA-1 listed in the article's indicators of compromise.
SHA1	`51ae6cad54f33846f83a352457b9a44ef8b7a61d`	Aokigahara sample SHA-1 listed in the article's indicators of compromise.
SHA1	`5fadf206dc163f63ebf66f984042b00c67121813`	Aokigahara sample SHA-1 listed in the article's indicators of compromise.
SHA1	`6393c0d3fb76f771a9418c2d152c621929ee002b`	Aokigahara sample SHA-1 listed in the article's indicators of compromise.
SHA1	`70915fac07af4ad7acc1868fe05dc00b98206f0f`	Aokigahara sample SHA-1 listed in the article's indicators of compromise.
SHA1	`82ebfc09c98bd211ff8b08efcd8ec8b9ce1fb4be`	Aokigahara sample SHA-1 listed in the article's indicators of compromise.
SHA1	`8d6c86e0af7807f9b5baf15e9f076bb81e012515`	SHA-1 hash listed for the clipper component.
SHA1	`8d860ca64ce0cbf40871fd66b9e3a513e73cda90`	Aokigahara sample SHA-1 listed in the article's indicators of compromise.
SHA1	`9003310bf73dc337b8b50131f1c0724a79161aac`	Aokigahara sample SHA-1 listed in the article's indicators of compromise.
SHA1	`a00da33342a5ea5168d851a5c93109e07cf95c49`	Aokigahara sample SHA-1 listed in the article's indicators of compromise.
SHA1	`b4491f1919a88deedebe7fba56b593e7d6655458`	Aokigahara sample SHA-1 listed in the article's indicators of compromise.
SHA1	`c810acdf30bcdfc6e8021e7f62a3bcce0828c2ee`	Aokigahara sample SHA-1 listed in the article's indicators of compromise.
SHA1	`d34491da5aa159314129c0ff67f957d873703e35`	Aokigahara sample SHA-1 listed in the article's indicators of compromise.
SHA1	`e052ff49190f54e0ffc52f7b3f7b5e7b9e121c4c`	Aokigahara sample SHA-1 listed in the article's indicators of compromise.
SHA1	`f4184e1bb61e19d190555c50fdb9d4591767bf53`	Aokigahara sample SHA-1 listed in the article's indicators of compromise.