Aoki (Malware): news timeline & CVEs

New Aoki Malware Targets ChatGPT, Claude, Codex and Gemini to Steal Credentials

Symantec says infostealer Aoki now steals local sessions and credentials for ChatGPT, Claude, Codex, Cursor, and Gemini.

Symantec's Threat Hunter team says newer Aoki, also called Aokigahara and detected as Infostealer.Aoki, now searches infected machines for local files and tokens tied to Claude, ChatGPT, OpenAI Codex, GitHub Copilot, Cursor, Google Gemini, JetBrains AI Assistant, and Kiro. Named files include Claude cookies, ChatGPT cookies, Codex config.toml and .env files, and Cursor's local state database. The stealer also collects browser cookies, passwords, payment data, cryptocurrency wallets, password-manager data, and Telegram and Discord information, then sends it to a /gate command-and-control endpoint. No threat group is named; defenders are advised to revoke AI sessions and rotate exposed keys from a clean device.

Cyber Security NewsOct 16, 10:22 UTC · 14h agoMalware in the wild 3 sources1· 1 read

Hackers Target Claude, ChatGPT and Cursor Credentials Using Aoki Infostealer

Aoki infostealer now steals Claude, ChatGPT, Cursor, Copilot, and Gemini credentials from developer machines.

Symantec's Threat Hunter Team says newer Aoki, also known as Aokigahara, samples steal AI-assistant secrets including .claude.json, Claude and ChatGPT cookies, Codex config.toml and .env files, and tokens for GitHub Copilot, Cursor, Gemini, JetBrains AI Assistant, and Kiro, plus AWS credentials. The stealer still collects browser data, cryptocurrency wallets, messaging and email material, VPN data, and password-manager secrets, then sends them to a /gate endpoint. This concerns credentials taken from compromised endpoints, not a breach of the AI providers. Researchers have not confirmed downstream misuse or how many victims are affected, and Cursor's local database may also contain cached chat context and code snippets.

GBHackersupdated Oct 16, 10:22 UTC · 14h agofirst Oct 16, 06:15 UTC · 18h agoMalware in the wild 3 sources1

New Aoki Infostealer Targets AI Coding Assistant Credentials

Symantec says the Aoki infostealer now steals API keys and sessions from AI coding assistants.

Symantec's Threat Hunter Team says newer builds of the Aoki infostealer steal credentials and session files from AI coding assistants, expanding beyond browser, cryptocurrency-wallet, and password-manager theft. Targeted files include .claude.json, Claude desktop cookies, ChatGPT cookies, and Codex config.toml and .env files, plus tokens for GitHub Copilot, Cursor, Gemini, JetBrains AI Assistant, and Kiro, and AWS credentials. Stolen keys can support LLMjacking and expose linked repositories, cloud services, and CI/CD pipelines. Aoki was first observed in 2026; Symantec has not tied it to a known group and assesses the operators as financially motivated.

Infosecurity Magazineupdated Oct 16, 10:22 UTC · 14h agofirst Oct 15, 13:00 UTC · 1d agoMalware in the wild 3 sources4

Aoki

Timeline3 articles

Appears with

New Aoki Malware Targets ChatGPT, Claude, Codex and Gemini to Steal Credentials

Hackers Target Claude, ChatGPT and Cursor Credentials Using Aoki Infostealer

New Aoki Infostealer Targets AI Coding Assistant Credentials