Djinn Stealer

Mentions · 7d0
Mentions · 30d0
All mentions2
First seenSep 9, 2026
Last mentionedSep 9, 2026

Timeline

2 articles · newest first

Hackers Target Claude, Cursor and Codex AI Agents to Steal Tokens and Prompt Histories

Gen Digital found infostealers like Amatera and Remus stealing AI coding agent tokens, prompt histories, and MCP configs from infected Windows and macOS machines.

Cyber Security NewsSep 9, 11:41 UTC · Sep 9, 2026MalwareExploited5

Infostealers Target Claude, Cursor, Codex and Other AI Agents to Steal Credentials and Sensitive Data

Gen Digital researchers report infostealer families Amatera, Remus and CallbackBeaver now harvest Claude, Cursor and Codex agent data, including tokens and MCP configs.

GBHackersSep 9, 07:05 UTC · Sep 9, 2026MalwareExploited4 · 1 read

Appears with

Remusmalware · 2
Claudeproduct · 2
OpenCodeproduct · 2
Clineproduct · 2
Gen Digitalvendor · 2
Otter Stealermalware · 2
Codexproduct · 2
Cursorproduct · 2
CallbackBeavermalware · 2
Continueproduct · 2
BeeStealermalware · 2
Amateramalware · 2
APEX Stealermalware · 2
STG Stealermalware · 2
HydraStealermalware · 2
Codexai model · 1

Entities are extracted by the model from each article. First seen Sep 9, 2026, last mentioned Sep 9, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.