Aokigahara infostealer collects AI coding-tool tokens and cloud credentials
Check Point says it searches local app storage rather than exploiting a flaw in the targeted AI assistants.
72
Organization
Symantec Threat Hunter Team
- Mentions · 7d1
- Mentions · 30d2
- All mentions2
- First seenOct 21, 2026
- Last mentioned4d ago
Timeline
2 articles · newest firstSymantec honeypot captures AI agent built for autonomous attacks
Instructions covered up to 100,000 actions, including scanning, credential theft and Monero mining, and were not executed.
68
Appears with
- Stygianmalware · 1
- Claude Codeproduct · 1
- JetBrains AI Assistantproduct · 1
- Cursorproduct · 1
- Broadcomvendor · 1
- Aokimalware · 1
- Gemini CLIproduct · 1
- Check Point Researchorganization · 1
- Kamideremalware · 1
- Windsurfproduct · 1
- Codexproduct · 1
- ChatGPT Desktopproduct · 1
- Aokigaharamalware · 1
- GitHub Copilotproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.