Aokigahara infostealer targets browsers, cloud keys, and AI apps
Check Point says the stealer also grabs Claude, ChatGPT Desktop, Codex, Cursor, and cloud and Git credentials.
72
Malware
Aokigahara
- Mentions · 7d1
- Mentions · 30d2
- All mentions2
- First seenOct 16, 2026
- Last mentioned2d ago
Timeline
2 articles · newest firstHackers Target Claude, ChatGPT and Cursor Credentials Using Aoki Infostealer
Aoki infostealer now steals Claude, ChatGPT, Cursor, Copilot, and Gemini credentials from developer machines.
58
Appears with
- Claudeai model · 2
- Cursorproduct · 2
- ChatGPTai model · 2
- Geminiai model · 2
- GitHub Copilotproduct · 2
- Kamideremalware · 1
- Codexproduct · 1
- Codeiumproduct · 1
- Symantecorganization · 1
- Codexai model · 1
- Kiroproduct · 1
- CYFIRMAorganization · 1
- Googlevendor · 1
- OpenAIvendor · 1
- JetBrains AI Assistantproduct · 1
- Aokimalware · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.