New Remus Infostealer Steals OpenAI and Anthropic API Tokens, Passwords and Crypto Wallets
SpyCloud Labs details Remus, a Windows infostealer harvesting AI platform API tokens, passwords, 2FA artifacts, and crypto wallets.
68
AI model
Anthropic API
- Mentions · 7d0
- Mentions · 30d0
- All mentions1
- First seenSep 21, 2026
- Last mentionedSep 21, 2026
Timeline
1 articles · newest firstAppears with
- Bitwardenproduct · 1
- SpyCloud Labsorganization · 1
- SpyCloudvendor · 1
- Google Cloudproduct · 1
- Remusmalware · 1
- OpenCodeproduct · 1
- LummaC2malware · 1
- SmokeLoadermalware · 1
- 1Passwordproduct · 1
- OpenAI APIai model · 1
- Codexproduct · 1
- Telegramproduct · 1
- Azureproduct · 1
- Gen Digitalvendor · 1
- Claude Codeproduct · 1
- Discordproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.