Hackers Target Claude, ChatGPT and Cursor Credentials Using Aoki Infostealer
Aoki infostealer now steals Claude, ChatGPT, Cursor, Copilot, and Gemini credentials from developer machines.
Symantec's Threat Hunter Team says newer Aoki, also known as Aokigahara, samples steal AI-assistant secrets including .claude.json, Claude and ChatGPT cookies, Codex config.toml and .env files, and tokens for GitHub Copilot, Cursor, Gemini, JetBrains AI Assistant, and Kiro, plus AWS credentials. The stealer still collects browser data, cryptocurrency wallets, messaging and email material, VPN data, and password-manager secrets, then sends them to a /gate endpoint. This concerns credentials taken from compromised endpoints, not a breach of the AI providers. Researchers have not confirmed downstream misuse or how many victims are affected, and Cursor's local database may also contain cached chat context and code snippets.