Skip to content
NewA calmer, faster ZeroHour
Malwarehigh

Aokigahara infostealer steals ChatGPT, Claude, Codex, and Cursor logins

Original title: New Aokigahara Malware Targets ChatGPT, Claude, Codex, and Cursor Login Credentials

Cyber Security Newsby Tushar Subhra Dutta ()5 min read1
Read at cybersecuritynews.com
Part of a story covered by 9 sourcesFake ChatGPT and Claude apps sideload Yoba malware via signed binariesMerged summary & timeline
AI summary · x-ai/grok-4.7Summaries by Vani AI

Check Point says the Windows stealer also grabs cloud, SSH, and browser secrets, not via flaws in those AI apps.

Check Point identified Aokigahara in the wild and described it in an October 23 report. The Windows infostealer searches local stores for sessions and credentials tied to Claude, Codex, ChatGPT Desktop, Cursor, and other AI coding tools, plus browser, wallet, and cloud data. It encrypts uploads and can skip systems using certain languages. The findings concern endpoint theft, not a breach of the AI services.

Unconfirmed: How operators monetize stolen data, and any link to Kamidere or Stygian, is unconfirmed.

Key facts
  • An aisessions module also covers Windsurf, Copilot, Gemini CLI, and Amazon Q.
  • An ide module collects Git, SSH, AWS, Azure, and Google Cloud data.
  • Uploads use AES-256-GCM after an X25519 key exchange.
  • Check Point published a YARA rule and C2 indicators.
  • An earlier build may have been called Kamidere or Stygian.
Security assessment · AI, from the article

Impact: Theft of AI sessions, keys, and browser credentials

What to do
  1. 1.Isolate a suspected host and revoke AI sessions from a clean system.
  2. 2.Rotate exposed keys and review cloud and repository accounts.
  3. 3.Use Check Point’s YARA rule to identify Aokigahara samples.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat
ATT&CK
T1552.001 Credentials In FilesT1555.004 Windows Credential ManagerT1113 Screen CaptureT1115 Clipboard DataT1041 Exfiltration Over C2 Channel
Tags
aokigaharainfostealerchatgptclaudecursorcredential-theft
Products
ChatGPT DesktopClaudeCodexCursor
Malware
AokigaharaKamidereStygian
Organizations
Check Point

Indicators of compromise

auto-extracted · verify before use · export allAll
TypeIndicatorContext
sha1007137599bc4d69ee952a5228b5fcb2c3b9a95a7samples. Aokigahara SHA-1 Aokigahara SHA-1 Aokigahara SHA-1 007137599bc4d69ee952a5228b5fcb2c3b9a95a7 00d52c7e759d878f0d8a117502f6d854af13f007 04eddccb79db41e03a
sha100d52c7e759d878f0d8a117502f6d854af13f0071 Aokigahara SHA-1 007137599bc4d69ee952a5228b5fcb2c3b9a95a7 00d52c7e759d878f0d8a117502f6d854af13f007 04eddccb79db41e03a4ee8542e8a33d7f1d9fe18 057a2d1dedeb93b776
sha104eddccb79db41e03a4ee8542e8a33d7f1d9fe18228b5fcb2c3b9a95a7 00d52c7e759d878f0d8a117502f6d854af13f007 04eddccb79db41e03a4ee8542e8a33d7f1d9fe18 057a2d1dedeb93b7765c455a9e0c469e7cbe4843 079ddf5cc7d6ca2e02
sha1057a2d1dedeb93b7765c455a9e0c469e7cbe48437502f6d854af13f007 04eddccb79db41e03a4ee8542e8a33d7f1d9fe18 057a2d1dedeb93b7765c455a9e0c469e7cbe4843 079ddf5cc7d6ca2e02f860f87d4d18c83db9d331 0b74ce90a39278fb97
sha1079ddf5cc7d6ca2e02f860f87d4d18c83db9d331542e8a33d7f1d9fe18 057a2d1dedeb93b7765c455a9e0c469e7cbe4843 079ddf5cc7d6ca2e02f860f87d4d18c83db9d331 0b74ce90a39278fb97fe94f6306af71cbe679503 0c46ac5555cf8f305c
sha10b74ce90a39278fb97fe94f6306af71cbe6795035a9e0c469e7cbe4843 079ddf5cc7d6ca2e02f860f87d4d18c83db9d331 0b74ce90a39278fb97fe94f6306af71cbe679503 0c46ac5555cf8f305c1345a21d0802c52bf52cd8 0d8d0bad2e08856ba3
sha10c46ac5555cf8f305c1345a21d0802c52bf52cd8f87d4d18c83db9d331 0b74ce90a39278fb97fe94f6306af71cbe679503 0c46ac5555cf8f305c1345a21d0802c52bf52cd8 0d8d0bad2e08856ba379e425e2e90e49506af631 0e76150cee3f2b89f0
sha10d8d0bad2e08856ba379e425e2e90e49506af631f6306af71cbe679503 0c46ac5555cf8f305c1345a21d0802c52bf52cd8 0d8d0bad2e08856ba379e425e2e90e49506af631 0e76150cee3f2b89f0fbe39106ab2898db109f09 0f69792cb926a41676
sha10e76150cee3f2b89f0fbe39106ab2898db109f09a21d0802c52bf52cd8 0d8d0bad2e08856ba379e425e2e90e49506af631 0e76150cee3f2b89f0fbe39106ab2898db109f09 0f69792cb926a416766d47a30a05009c13be0d64 130f2710cf9863bdd6
sha10f69792cb926a416766d47a30a05009c13be0d6425e2e90e49506af631 0e76150cee3f2b89f0fbe39106ab2898db109f09 0f69792cb926a416766d47a30a05009c13be0d64 130f2710cf9863bdd6724e8912600505b6fb7ef2 133dc00ad81638e6b0
sha1130f2710cf9863bdd6724e8912600505b6fb7ef29106ab2898db109f09 0f69792cb926a416766d47a30a05009c13be0d64 130f2710cf9863bdd6724e8912600505b6fb7ef2 133dc00ad81638e6b0a2f8f163b4d694ce477165 151d8013ca3ab3dab9
sha1133dc00ad81638e6b0a2f8f163b4d694ce477165a30a05009c13be0d64 130f2710cf9863bdd6724e8912600505b6fb7ef2 133dc00ad81638e6b0a2f8f163b4d694ce477165 151d8013ca3ab3dab9cd37f4ed9870cc83e87a77 1701db4fa798b309cb
sha1151d8013ca3ab3dab9cd37f4ed9870cc83e87a778912600505b6fb7ef2 133dc00ad81638e6b0a2f8f163b4d694ce477165 151d8013ca3ab3dab9cd37f4ed9870cc83e87a77 1701db4fa798b309cb25227408406dde4c69de8a 1835f1e0b1eda3dc4b
sha11701db4fa798b309cb25227408406dde4c69de8af163b4d694ce477165 151d8013ca3ab3dab9cd37f4ed9870cc83e87a77 1701db4fa798b309cb25227408406dde4c69de8a 1835f1e0b1eda3dc4b39682ecad3eba88cbbc44e 18e041b5a0c668392f
sha11835f1e0b1eda3dc4b39682ecad3eba88cbbc44ef4ed9870cc83e87a77 1701db4fa798b309cb25227408406dde4c69de8a 1835f1e0b1eda3dc4b39682ecad3eba88cbbc44e 18e041b5a0c668392ff4d036f3f9660c2698311e 1a6a6e08a01cc3f145
sha118e041b5a0c668392ff4d036f3f9660c2698311e7408406dde4c69de8a 1835f1e0b1eda3dc4b39682ecad3eba88cbbc44e 18e041b5a0c668392ff4d036f3f9660c2698311e 1a6a6e08a01cc3f1455af2c4ecd59a3d7802cd7a 1a7248720f3ac79082
sha11a6a6e08a01cc3f1455af2c4ecd59a3d7802cd7a2ecad3eba88cbbc44e 18e041b5a0c668392ff4d036f3f9660c2698311e 1a6a6e08a01cc3f1455af2c4ecd59a3d7802cd7a 1a7248720f3ac79082841b006582f20799b314a9 1a97a18db74f2b6df9
sha11a7248720f3ac79082841b006582f20799b314a936f3f9660c2698311e 1a6a6e08a01cc3f1455af2c4ecd59a3d7802cd7a 1a7248720f3ac79082841b006582f20799b314a9 1a97a18db74f2b6df984c9a188a79b4e65a06b81 1cb6ccfdcb277a0277
sha11a97a18db74f2b6df984c9a188a79b4e65a06b81c4ecd59a3d7802cd7a 1a7248720f3ac79082841b006582f20799b314a9 1a97a18db74f2b6df984c9a188a79b4e65a06b81 1cb6ccfdcb277a0277729443d15f17a441fa0eda 1cb8dc11bdb8baf342
sha11cb6ccfdcb277a0277729443d15f17a441fa0eda006582f20799b314a9 1a97a18db74f2b6df984c9a188a79b4e65a06b81 1cb6ccfdcb277a0277729443d15f17a441fa0eda 1cb8dc11bdb8baf342b83079fb650cd6bb1b132d 1e072236f87cd914dc
sha11cb8dc11bdb8baf342b83079fb650cd6bb1b132da188a79b4e65a06b81 1cb6ccfdcb277a0277729443d15f17a441fa0eda 1cb8dc11bdb8baf342b83079fb650cd6bb1b132d 1e072236f87cd914dc583ca2163460d656bfcfba 1e94d7f1d501724076
sha11e072236f87cd914dc583ca2163460d656bfcfba43d15f17a441fa0eda 1cb8dc11bdb8baf342b83079fb650cd6bb1b132d 1e072236f87cd914dc583ca2163460d656bfcfba 1e94d7f1d501724076fcf98459e14b68321d45f7 2045f165d737f2d43b
sha11e94d7f1d501724076fcf98459e14b68321d45f779fb650cd6bb1b132d 1e072236f87cd914dc583ca2163460d656bfcfba 1e94d7f1d501724076fcf98459e14b68321d45f7 2045f165d737f2d43ba603d444dfa5d9e6f05805 211e45f306b84a82cf
sha12045f165d737f2d43ba603d444dfa5d9e6f05805a2163460d656bfcfba 1e94d7f1d501724076fcf98459e14b68321d45f7 2045f165d737f2d43ba603d444dfa5d9e6f05805 211e45f306b84a82cfe736635c176a424e7479dc 21ef070e39f651118a
sha1211e45f306b84a82cfe736635c176a424e7479dc8459e14b68321d45f7 2045f165d737f2d43ba603d444dfa5d9e6f05805 211e45f306b84a82cfe736635c176a424e7479dc 21ef070e39f651118a804882374dc2dfa3e38666 2362a326070d83c167
sha121ef070e39f651118a804882374dc2dfa3e38666d444dfa5d9e6f05805 211e45f306b84a82cfe736635c176a424e7479dc 21ef070e39f651118a804882374dc2dfa3e38666 2362a326070d83c167251873b389bd783781cf6c 241e37b8fc5ffeefbd
sha12362a326070d83c167251873b389bd783781cf6c635c176a424e7479dc 21ef070e39f651118a804882374dc2dfa3e38666 2362a326070d83c167251873b389bd783781cf6c 241e37b8fc5ffeefbd1d89a82b74cf2d92b49eac 244371fc1642f0548b
sha1241e37b8fc5ffeefbd1d89a82b74cf2d92b49eac82374dc2dfa3e38666 2362a326070d83c167251873b389bd783781cf6c 241e37b8fc5ffeefbd1d89a82b74cf2d92b49eac 244371fc1642f0548b807b0a4a2e7ea5d7b4c82a 28099fc5a8cbbd4017
sha1244371fc1642f0548b807b0a4a2e7ea5d7b4c82a73b389bd783781cf6c 241e37b8fc5ffeefbd1d89a82b74cf2d92b49eac 244371fc1642f0548b807b0a4a2e7ea5d7b4c82a 28099fc5a8cbbd40173f8ac0aded9044fdb4a598 2cdc77108c585d14b1
sha128099fc5a8cbbd40173f8ac0aded9044fdb4a598a82b74cf2d92b49eac 244371fc1642f0548b807b0a4a2e7ea5d7b4c82a 28099fc5a8cbbd40173f8ac0aded9044fdb4a598 2cdc77108c585d14b1567053b8f8a58ea78c255f 2f30b116ca3dc48ff5
sha12cdc77108c585d14b1567053b8f8a58ea78c255f0a4a2e7ea5d7b4c82a 28099fc5a8cbbd40173f8ac0aded9044fdb4a598 2cdc77108c585d14b1567053b8f8a58ea78c255f 2f30b116ca3dc48ff5783c3bb7391d671866e27b 30737fa46f2ff93e33
sha12f30b116ca3dc48ff5783c3bb7391d671866e27bc0aded9044fdb4a598 2cdc77108c585d14b1567053b8f8a58ea78c255f 2f30b116ca3dc48ff5783c3bb7391d671866e27b 30737fa46f2ff93e33f45008cf306233954ea898 324e0fffc7977f8ff5
sha130737fa46f2ff93e33f45008cf306233954ea89853b8f8a58ea78c255f 2f30b116ca3dc48ff5783c3bb7391d671866e27b 30737fa46f2ff93e33f45008cf306233954ea898 324e0fffc7977f8ff591993819123d33c2970953 3586eeaf3ffe2c3a4f
sha1324e0fffc7977f8ff591993819123d33c29709533bb7391d671866e27b 30737fa46f2ff93e33f45008cf306233954ea898 324e0fffc7977f8ff591993819123d33c2970953 3586eeaf3ffe2c3a4f1d005aee863b7aee7cc7bd 3696baa239c479f9f5
sha13586eeaf3ffe2c3a4f1d005aee863b7aee7cc7bd08cf306233954ea898 324e0fffc7977f8ff591993819123d33c2970953 3586eeaf3ffe2c3a4f1d005aee863b7aee7cc7bd 3696baa239c479f9f5103618214972890f1a473b 385e21a96687a33f79
sha13696baa239c479f9f5103618214972890f1a473b3819123d33c2970953 3586eeaf3ffe2c3a4f1d005aee863b7aee7cc7bd 3696baa239c479f9f5103618214972890f1a473b 385e21a96687a33f79f9cab0627aec7218e1a8f4 38b2c29b46086b4171
sha1385e21a96687a33f79f9cab0627aec7218e1a8f45aee863b7aee7cc7bd 3696baa239c479f9f5103618214972890f1a473b 385e21a96687a33f79f9cab0627aec7218e1a8f4 38b2c29b46086b417181deb958e8b276a9d1fbf4 3aaeb49864108c92af
sha138b2c29b46086b417181deb958e8b276a9d1fbf418214972890f1a473b 385e21a96687a33f79f9cab0627aec7218e1a8f4 38b2c29b46086b417181deb958e8b276a9d1fbf4 3aaeb49864108c92af50feeb5d9e3b3efaa39818 3c56a0c3c59a1425bf
sha13aaeb49864108c92af50feeb5d9e3b3efaa39818b0627aec7218e1a8f4 38b2c29b46086b417181deb958e8b276a9d1fbf4 3aaeb49864108c92af50feeb5d9e3b3efaa39818 3c56a0c3c59a1425bfdcdffda9e8b308f478b147 426bea548a24f7f39c
sha13c56a0c3c59a1425bfdcdffda9e8b308f478b147b958e8b276a9d1fbf4 3aaeb49864108c92af50feeb5d9e3b3efaa39818 3c56a0c3c59a1425bfdcdffda9e8b308f478b147 426bea548a24f7f39c279770b5dd21fbed7f7328 4417d2645adb6e7e94
sha1426bea548a24f7f39c279770b5dd21fbed7f7328eb5d9e3b3efaa39818 3c56a0c3c59a1425bfdcdffda9e8b308f478b147 426bea548a24f7f39c279770b5dd21fbed7f7328 4417d2645adb6e7e94959daf483f93058500840f 4485feb1385975ef13
sha14417d2645adb6e7e94959daf483f93058500840ffda9e8b308f478b147 426bea548a24f7f39c279770b5dd21fbed7f7328 4417d2645adb6e7e94959daf483f93058500840f 4485feb1385975ef13f08148cdc679f50fa0cc6d 456414c0acf463e06f
sha14485feb1385975ef13f08148cdc679f50fa0cc6d70b5dd21fbed7f7328 4417d2645adb6e7e94959daf483f93058500840f 4485feb1385975ef13f08148cdc679f50fa0cc6d 456414c0acf463e06f95f5bd3d8355758fca6b53 4595d1875441ffb8c0
sha1456414c0acf463e06f95f5bd3d8355758fca6b53af483f93058500840f 4485feb1385975ef13f08148cdc679f50fa0cc6d 456414c0acf463e06f95f5bd3d8355758fca6b53 4595d1875441ffb8c076856e366d1f4f5c74a679 48c6b66dc4b4d40d72
sha14595d1875441ffb8c076856e366d1f4f5c74a67948cdc679f50fa0cc6d 456414c0acf463e06f95f5bd3d8355758fca6b53 4595d1875441ffb8c076856e366d1f4f5c74a679 48c6b66dc4b4d40d72b7460e6fd670b6c03d5d40 4b3a4ad0acd43fc879
sha148c6b66dc4b4d40d72b7460e6fd670b6c03d5d40bd3d8355758fca6b53 4595d1875441ffb8c076856e366d1f4f5c74a679 48c6b66dc4b4d40d72b7460e6fd670b6c03d5d40 4b3a4ad0acd43fc8796147381074a98e8e576904 4c07021f8b0cdd3ca3
sha14b3a4ad0acd43fc8796147381074a98e8e5769046e366d1f4f5c74a679 48c6b66dc4b4d40d72b7460e6fd670b6c03d5d40 4b3a4ad0acd43fc8796147381074a98e8e576904 4c07021f8b0cdd3ca334a13f9af2bade9e699dc2 50060c0fc5fa893267
sha14c07021f8b0cdd3ca334a13f9af2bade9e699dc20e6fd670b6c03d5d40 4b3a4ad0acd43fc8796147381074a98e8e576904 4c07021f8b0cdd3ca334a13f9af2bade9e699dc2 50060c0fc5fa8932671eb24b03b05d00c2e99951 51ae6cad54f33846f8
sha150060c0fc5fa8932671eb24b03b05d00c2e99951381074a98e8e576904 4c07021f8b0cdd3ca334a13f9af2bade9e699dc2 50060c0fc5fa8932671eb24b03b05d00c2e99951 51ae6cad54f33846f83a352457b9a44ef8b7a61d 59bbaca8a848215e7e
sha151ae6cad54f33846f83a352457b9a44ef8b7a61d3f9af2bade9e699dc2 50060c0fc5fa8932671eb24b03b05d00c2e99951 51ae6cad54f33846f83a352457b9a44ef8b7a61d 59bbaca8a848215e7e4af7cec320432c51b0b812 5ef7eb755f1e3f6bf8
sha159bbaca8a848215e7e4af7cec320432c51b0b8124b03b05d00c2e99951 51ae6cad54f33846f83a352457b9a44ef8b7a61d 59bbaca8a848215e7e4af7cec320432c51b0b812 5ef7eb755f1e3f6bf8586794777466a639057dcb 5fadf206dc163f63eb
sha15ef7eb755f1e3f6bf8586794777466a639057dcb2457b9a44ef8b7a61d 59bbaca8a848215e7e4af7cec320432c51b0b812 5ef7eb755f1e3f6bf8586794777466a639057dcb 5fadf206dc163f63ebf66f984042b00c67121813 5fe11fbb89d33efa71
sha15fadf206dc163f63ebf66f984042b00c67121813cec320432c51b0b812 5ef7eb755f1e3f6bf8586794777466a639057dcb 5fadf206dc163f63ebf66f984042b00c67121813 5fe11fbb89d33efa712ffb8590626bd88fecab8f 61a024f5a42a9a91b0
sha15fe11fbb89d33efa712ffb8590626bd88fecab8f94777466a639057dcb 5fadf206dc163f63ebf66f984042b00c67121813 5fe11fbb89d33efa712ffb8590626bd88fecab8f 61a024f5a42a9a91b0a9871a1613c7fb3ef5613b 62dcc9ba2a5eee9dd9
sha161a024f5a42a9a91b0a9871a1613c7fb3ef5613b984042b00c67121813 5fe11fbb89d33efa712ffb8590626bd88fecab8f 61a024f5a42a9a91b0a9871a1613c7fb3ef5613b 62dcc9ba2a5eee9dd941ad08766603c89a45869b 6393c0d3fb76f771a9
sha162dcc9ba2a5eee9dd941ad08766603c89a45869b8590626bd88fecab8f 61a024f5a42a9a91b0a9871a1613c7fb3ef5613b 62dcc9ba2a5eee9dd941ad08766603c89a45869b 6393c0d3fb76f771a9418c2d152c621929ee002b 63cc5033532cd00bda
sha16393c0d3fb76f771a9418c2d152c621929ee002b1a1613c7fb3ef5613b 62dcc9ba2a5eee9dd941ad08766603c89a45869b 6393c0d3fb76f771a9418c2d152c621929ee002b 63cc5033532cd00bda3d4968b1257629e613505a 682dd6392004e1131b
sha163cc5033532cd00bda3d4968b1257629e613505a08766603c89a45869b 6393c0d3fb76f771a9418c2d152c621929ee002b 63cc5033532cd00bda3d4968b1257629e613505a 682dd6392004e1131b1aa3f2351a0bc7adb84d14 699c809a116106da40
sha1682dd6392004e1131b1aa3f2351a0bc7adb84d142d152c621929ee002b 63cc5033532cd00bda3d4968b1257629e613505a 682dd6392004e1131b1aa3f2351a0bc7adb84d14 699c809a116106da40b3f641c11b0db34d0f1c5e 6a09fffca381f6624d
sha1699c809a116106da40b3f641c11b0db34d0f1c5e68b1257629e613505a 682dd6392004e1131b1aa3f2351a0bc7adb84d14 699c809a116106da40b3f641c11b0db34d0f1c5e 6a09fffca381f6624d2def1083284ca486306e7c 6c860007f8f49de8e9
sha16a09fffca381f6624d2def1083284ca486306e7cf2351a0bc7adb84d14 699c809a116106da40b3f641c11b0db34d0f1c5e 6a09fffca381f6624d2def1083284ca486306e7c 6c860007f8f49de8e9848b538bd7acdc6bfcdf55 6e073a196a9bfa01da
sha16c860007f8f49de8e9848b538bd7acdc6bfcdf5541c11b0db34d0f1c5e 6a09fffca381f6624d2def1083284ca486306e7c 6c860007f8f49de8e9848b538bd7acdc6bfcdf55 6e073a196a9bfa01da418b5783c2395fb22c7ec9 6eb8f17dba69f6d25b
sha16e073a196a9bfa01da418b5783c2395fb22c7ec91083284ca486306e7c 6c860007f8f49de8e9848b538bd7acdc6bfcdf55 6e073a196a9bfa01da418b5783c2395fb22c7ec9 6eb8f17dba69f6d25b7f5c529b25d199707b69e2 6f7d5935602c188b1e
sha16eb8f17dba69f6d25b7f5c529b25d199707b69e2538bd7acdc6bfcdf55 6e073a196a9bfa01da418b5783c2395fb22c7ec9 6eb8f17dba69f6d25b7f5c529b25d199707b69e2 6f7d5935602c188b1e3066b4ab9aeef7b85a8ec2 70915fac07af4ad7ac
sha16f7d5935602c188b1e3066b4ab9aeef7b85a8ec25783c2395fb22c7ec9 6eb8f17dba69f6d25b7f5c529b25d199707b69e2 6f7d5935602c188b1e3066b4ab9aeef7b85a8ec2 70915fac07af4ad7acc1868fe05dc00b98206f0f 70d4007b11e56752ff
sha170915fac07af4ad7acc1868fe05dc00b98206f0f529b25d199707b69e2 6f7d5935602c188b1e3066b4ab9aeef7b85a8ec2 70915fac07af4ad7acc1868fe05dc00b98206f0f 70d4007b11e56752fffb81f71c90987f4bb441fa 70e91644802053cfa6
sha170d4007b11e56752fffb81f71c90987f4bb441fab4ab9aeef7b85a8ec2 70915fac07af4ad7acc1868fe05dc00b98206f0f 70d4007b11e56752fffb81f71c90987f4bb441fa 70e91644802053cfa68be6ec0f94207282ff27e4 7233a15327dc2f0cca
sha170e91644802053cfa68be6ec0f94207282ff27e48fe05dc00b98206f0f 70d4007b11e56752fffb81f71c90987f4bb441fa 70e91644802053cfa68be6ec0f94207282ff27e4 7233a15327dc2f0cca0292e6352eebf6e6e090d8 72aa6417a19c45dabd
sha17233a15327dc2f0cca0292e6352eebf6e6e090d8f71c90987f4bb441fa 70e91644802053cfa68be6ec0f94207282ff27e4 7233a15327dc2f0cca0292e6352eebf6e6e090d8 72aa6417a19c45dabdd6c79087fb13c73ae7b823 7cc6c75fad93b2482a
sha172aa6417a19c45dabdd6c79087fb13c73ae7b823ec0f94207282ff27e4 7233a15327dc2f0cca0292e6352eebf6e6e090d8 72aa6417a19c45dabdd6c79087fb13c73ae7b823 7cc6c75fad93b2482a9c5f4522530007c72f99e0 82ebfc09c98bd211ff
sha17cc6c75fad93b2482a9c5f4522530007c72f99e0e6352eebf6e6e090d8 72aa6417a19c45dabdd6c79087fb13c73ae7b823 7cc6c75fad93b2482a9c5f4522530007c72f99e0 82ebfc09c98bd211ff8b08efcd8ec8b9ce1fb4be 83b43ce0ee98812014
sha182ebfc09c98bd211ff8b08efcd8ec8b9ce1fb4be9087fb13c73ae7b823 7cc6c75fad93b2482a9c5f4522530007c72f99e0 82ebfc09c98bd211ff8b08efcd8ec8b9ce1fb4be 83b43ce0ee9881201451c0604fb5b792bd4581f5 86230c07e638b85bc8
sha183b43ce0ee9881201451c0604fb5b792bd4581f54522530007c72f99e0 82ebfc09c98bd211ff8b08efcd8ec8b9ce1fb4be 83b43ce0ee9881201451c0604fb5b792bd4581f5 86230c07e638b85bc8010df1aa9e33ca61fda4cc 89f296aef7988bdd59
sha186230c07e638b85bc8010df1aa9e33ca61fda4ccefcd8ec8b9ce1fb4be 83b43ce0ee9881201451c0604fb5b792bd4581f5 86230c07e638b85bc8010df1aa9e33ca61fda4cc 89f296aef7988bdd59109e4263d0a31c886770aa 8b0cf62382f620bbbf
sha189f296aef7988bdd59109e4263d0a31c886770aa604fb5b792bd4581f5 86230c07e638b85bc8010df1aa9e33ca61fda4cc 89f296aef7988bdd59109e4263d0a31c886770aa 8b0cf62382f620bbbf5d176295d63ed522ab9c2c 8c3111a61fbf30e86b
sha18b0cf62382f620bbbf5d176295d63ed522ab9c2cf1aa9e33ca61fda4cc 89f296aef7988bdd59109e4263d0a31c886770aa 8b0cf62382f620bbbf5d176295d63ed522ab9c2c 8c3111a61fbf30e86b8206397ce3c0017e5ea509 8c4c1d8325adb463c3
sha18c3111a61fbf30e86b8206397ce3c0017e5ea5094263d0a31c886770aa 8b0cf62382f620bbbf5d176295d63ed522ab9c2c 8c3111a61fbf30e86b8206397ce3c0017e5ea509 8c4c1d8325adb463c34694ce3a5a851e97b81a6f 8d7a81119ce7be6eb4
sha18c4c1d8325adb463c34694ce3a5a851e97b81a6f6295d63ed522ab9c2c 8c3111a61fbf30e86b8206397ce3c0017e5ea509 8c4c1d8325adb463c34694ce3a5a851e97b81a6f 8d7a81119ce7be6eb452192f08fa2669228ff597 8d860ca64ce0cbf408
sha18d6c86e0af7807f9b5baf15e9f076bb81e012515od[.]pw Aokigahara command-and-control infrastructure SHA-1 8d6c86e0af7807f9b5baf15e9f076bb81e012515 Dropped clipper component The following table reproduces al
sha18d7a81119ce7be6eb452192f08fa2669228ff597397ce3c0017e5ea509 8c4c1d8325adb463c34694ce3a5a851e97b81a6f 8d7a81119ce7be6eb452192f08fa2669228ff597 8d860ca64ce0cbf40871fd66b9e3a513e73cda90 8dc40b7208b8c0d95d
sha18d860ca64ce0cbf40871fd66b9e3a513e73cda90ce3a5a851e97b81a6f 8d7a81119ce7be6eb452192f08fa2669228ff597 8d860ca64ce0cbf40871fd66b9e3a513e73cda90 8dc40b7208b8c0d95d1ab8dda9a56fff790b3ddd 8e9fd1274b77ff9726
sha18dc40b7208b8c0d95d1ab8dda9a56fff790b3ddd2f08fa2669228ff597 8d860ca64ce0cbf40871fd66b9e3a513e73cda90 8dc40b7208b8c0d95d1ab8dda9a56fff790b3ddd 8e9fd1274b77ff9726c4637d008a9d599c9d5f1e 9003310bf73dc337b8
sha18e9fd1274b77ff9726c4637d008a9d599c9d5f1e66b9e3a513e73cda90 8dc40b7208b8c0d95d1ab8dda9a56fff790b3ddd 8e9fd1274b77ff9726c4637d008a9d599c9d5f1e 9003310bf73dc337b8b50131f1c0724a79161aac 90c057dafefbee423e
sha19003310bf73dc337b8b50131f1c0724a79161aacdda9a56fff790b3ddd 8e9fd1274b77ff9726c4637d008a9d599c9d5f1e 9003310bf73dc337b8b50131f1c0724a79161aac 90c057dafefbee423e3014266218272d454a0aa3 912ed8ce7767f94f62
sha190c057dafefbee423e3014266218272d454a0aa37d008a9d599c9d5f1e 9003310bf73dc337b8b50131f1c0724a79161aac 90c057dafefbee423e3014266218272d454a0aa3 912ed8ce7767f94f62de6a30fb8e9df7c0c512f7 9369e0e5eae22cff71
sha1912ed8ce7767f94f62de6a30fb8e9df7c0c512f731f1c0724a79161aac 90c057dafefbee423e3014266218272d454a0aa3 912ed8ce7767f94f62de6a30fb8e9df7c0c512f7 9369e0e5eae22cff71b375ad285ea89471f25101 97c80e2d382e6e55f6
sha19369e0e5eae22cff71b375ad285ea89471f25101266218272d454a0aa3 912ed8ce7767f94f62de6a30fb8e9df7c0c512f7 9369e0e5eae22cff71b375ad285ea89471f25101 97c80e2d382e6e55f61702da3afb838fdec2f4f1 98c6649cc256dfadf1
sha197c80e2d382e6e55f61702da3afb838fdec2f4f130fb8e9df7c0c512f7 9369e0e5eae22cff71b375ad285ea89471f25101 97c80e2d382e6e55f61702da3afb838fdec2f4f1 98c6649cc256dfadf1af939da46f037b05c0f2e5 99b28a20851a3ed297
sha198c6649cc256dfadf1af939da46f037b05c0f2e5ad285ea89471f25101 97c80e2d382e6e55f61702da3afb838fdec2f4f1 98c6649cc256dfadf1af939da46f037b05c0f2e5 99b28a20851a3ed29769a469f4dd31ebbb8a83de 9d424ce23753ffddc7
sha199b28a20851a3ed29769a469f4dd31ebbb8a83deda3afb838fdec2f4f1 98c6649cc256dfadf1af939da46f037b05c0f2e5 99b28a20851a3ed29769a469f4dd31ebbb8a83de 9d424ce23753ffddc7b39477222123b0f2c33066 9f05045f5447d79c8c
sha19d424ce23753ffddc7b39477222123b0f2c330669da46f037b05c0f2e5 99b28a20851a3ed29769a469f4dd31ebbb8a83de 9d424ce23753ffddc7b39477222123b0f2c33066 9f05045f5447d79c8c0d0f5cb589fd85c89620d3 9f20034441e78574ae
sha19f05045f5447d79c8c0d0f5cb589fd85c89620d369f4dd31ebbb8a83de 9d424ce23753ffddc7b39477222123b0f2c33066 9f05045f5447d79c8c0d0f5cb589fd85c89620d3 9f20034441e78574aec7ad39842a342f939eaf6a a00da33342a5ea5168
sha19f20034441e78574aec7ad39842a342f939eaf6a77222123b0f2c33066 9f05045f5447d79c8c0d0f5cb589fd85c89620d3 9f20034441e78574aec7ad39842a342f939eaf6a a00da33342a5ea5168d851a5c93109e07cf95c49 a2abdf1af38da9995a
sha1a00da33342a5ea5168d851a5c93109e07cf95c495cb589fd85c89620d3 9f20034441e78574aec7ad39842a342f939eaf6a a00da33342a5ea5168d851a5c93109e07cf95c49 a2abdf1af38da9995a3b6672ce6c34e9e17c39a4 a4871f4a61faf74e1c
sha1a2abdf1af38da9995a3b6672ce6c34e9e17c39a439842a342f939eaf6a a00da33342a5ea5168d851a5c93109e07cf95c49 a2abdf1af38da9995a3b6672ce6c34e9e17c39a4 a4871f4a61faf74e1cceaffe26901f6076c9f37e a63ded811d412cd0f8
sha1a4871f4a61faf74e1cceaffe26901f6076c9f37ea5c93109e07cf95c49 a2abdf1af38da9995a3b6672ce6c34e9e17c39a4 a4871f4a61faf74e1cceaffe26901f6076c9f37e a63ded811d412cd0f859891b0c1f066b87bb1b80 a84148b4d408544325
sha1a63ded811d412cd0f859891b0c1f066b87bb1b8072ce6c34e9e17c39a4 a4871f4a61faf74e1cceaffe26901f6076c9f37e a63ded811d412cd0f859891b0c1f066b87bb1b80 a84148b4d408544325c20ee04299ae95c762b6a2 ad960d2abb1999a726
sha1a84148b4d408544325c20ee04299ae95c762b6a2fe26901f6076c9f37e a63ded811d412cd0f859891b0c1f066b87bb1b80 a84148b4d408544325c20ee04299ae95c762b6a2 ad960d2abb1999a7260c5f498532a5bb8754c2a5 ae9d6b1a32a45b05ed
sha1ad960d2abb1999a7260c5f498532a5bb8754c2a51b0c1f066b87bb1b80 a84148b4d408544325c20ee04299ae95c762b6a2 ad960d2abb1999a7260c5f498532a5bb8754c2a5 ae9d6b1a32a45b05edb920538e538a3d6a5fe439 af196456d2ebf9556a
sha1ae9d6b1a32a45b05edb920538e538a3d6a5fe439e04299ae95c762b6a2 ad960d2abb1999a7260c5f498532a5bb8754c2a5 ae9d6b1a32a45b05edb920538e538a3d6a5fe439 af196456d2ebf9556ab239661922565e1bca9ac0 b335483800d35a29c2
sha1af196456d2ebf9556ab239661922565e1bca9ac0498532a5bb8754c2a5 ae9d6b1a32a45b05edb920538e538a3d6a5fe439 af196456d2ebf9556ab239661922565e1bca9ac0 b335483800d35a29c25767c917725e24c21b0f2b b33e59c598845d2547
sha1b335483800d35a29c25767c917725e24c21b0f2b538e538a3d6a5fe439 af196456d2ebf9556ab239661922565e1bca9ac0 b335483800d35a29c25767c917725e24c21b0f2b b33e59c598845d2547ddc7f654115df2284bb3ae b36d0796e33f808eae
sha1b33e59c598845d2547ddc7f654115df2284bb3ae661922565e1bca9ac0 b335483800d35a29c25767c917725e24c21b0f2b b33e59c598845d2547ddc7f654115df2284bb3ae b36d0796e33f808eaeb33b33908327a410680c56 b4491f1919a88deede
sha1b36d0796e33f808eaeb33b33908327a410680c56c917725e24c21b0f2b b33e59c598845d2547ddc7f654115df2284bb3ae b36d0796e33f808eaeb33b33908327a410680c56 b4491f1919a88deedebe7fba56b593e7d6655458 b523d56d82485253f2
sha1b4491f1919a88deedebe7fba56b593e7d6655458f654115df2284bb3ae b36d0796e33f808eaeb33b33908327a410680c56 b4491f1919a88deedebe7fba56b593e7d6655458 b523d56d82485253f2e3619437c8398b7ee0f20d b607025d3e06d1e8cf
sha1b523d56d82485253f2e3619437c8398b7ee0f20d33908327a410680c56 b4491f1919a88deedebe7fba56b593e7d6655458 b523d56d82485253f2e3619437c8398b7ee0f20d b607025d3e06d1e8cffcd398c64871d7fcd92bf4 b6f0dfd3aa2fc7b8b2
sha1b607025d3e06d1e8cffcd398c64871d7fcd92bf4ba56b593e7d6655458 b523d56d82485253f2e3619437c8398b7ee0f20d b607025d3e06d1e8cffcd398c64871d7fcd92bf4 b6f0dfd3aa2fc7b8b2ad432c4a4276da23ceb46b bab4c910e3c98085bf
sha1b6f0dfd3aa2fc7b8b2ad432c4a4276da23ceb46b9437c8398b7ee0f20d b607025d3e06d1e8cffcd398c64871d7fcd92bf4 b6f0dfd3aa2fc7b8b2ad432c4a4276da23ceb46b bab4c910e3c98085bf228519f346d071a75e44e3 bad339c5ad65808285
sha1bab4c910e3c98085bf228519f346d071a75e44e398c64871d7fcd92bf4 b6f0dfd3aa2fc7b8b2ad432c4a4276da23ceb46b bab4c910e3c98085bf228519f346d071a75e44e3 bad339c5ad65808285b0e87498f2ea6f669417d9 c00aceaa40b38e48f6
sha1bad339c5ad65808285b0e87498f2ea6f669417d92c4a4276da23ceb46b bab4c910e3c98085bf228519f346d071a75e44e3 bad339c5ad65808285b0e87498f2ea6f669417d9 c00aceaa40b38e48f662ac927bb86302934aaf96 c2e28ba5523c1f3a54
sha1c00aceaa40b38e48f662ac927bb86302934aaf9619f346d071a75e44e3 bad339c5ad65808285b0e87498f2ea6f669417d9 c00aceaa40b38e48f662ac927bb86302934aaf96 c2e28ba5523c1f3a545a0b4a00a9d5e9c8ae7583 c323c59815082ac842
sha1c2e28ba5523c1f3a545a0b4a00a9d5e9c8ae75837498f2ea6f669417d9 c00aceaa40b38e48f662ac927bb86302934aaf96 c2e28ba5523c1f3a545a0b4a00a9d5e9c8ae7583 c323c59815082ac842f0bafcc01f537444e1cc5a c5b50b5e14dfb5e028
sha1c323c59815082ac842f0bafcc01f537444e1cc5a927bb86302934aaf96 c2e28ba5523c1f3a545a0b4a00a9d5e9c8ae7583 c323c59815082ac842f0bafcc01f537444e1cc5a c5b50b5e14dfb5e028dfd88a4e4fb960dd650b52 c810acdf30bcdfc6e8
sha1c5b50b5e14dfb5e028dfd88a4e4fb960dd650b524a00a9d5e9c8ae7583 c323c59815082ac842f0bafcc01f537444e1cc5a c5b50b5e14dfb5e028dfd88a4e4fb960dd650b52 c810acdf30bcdfc6e8021e7f62a3bcce0828c2ee c8456bb71a74ed6305
sha1c810acdf30bcdfc6e8021e7f62a3bcce0828c2eefcc01f537444e1cc5a c5b50b5e14dfb5e028dfd88a4e4fb960dd650b52 c810acdf30bcdfc6e8021e7f62a3bcce0828c2ee c8456bb71a74ed6305455c318295b8a39e9277f3 cbdff0df0dbdbc3c18
sha1c8456bb71a74ed6305455c318295b8a39e9277f38a4e4fb960dd650b52 c810acdf30bcdfc6e8021e7f62a3bcce0828c2ee c8456bb71a74ed6305455c318295b8a39e9277f3 cbdff0df0dbdbc3c1845d208661dd75fd335ef93 cc12fcb9e5e6f7afde
sha1cbdff0df0dbdbc3c1845d208661dd75fd335ef937f62a3bcce0828c2ee c8456bb71a74ed6305455c318295b8a39e9277f3 cbdff0df0dbdbc3c1845d208661dd75fd335ef93 cc12fcb9e5e6f7afde66f5c3452ed6e3cd6d5390 cc708ae3d7aa084279
sha1cc12fcb9e5e6f7afde66f5c3452ed6e3cd6d5390318295b8a39e9277f3 cbdff0df0dbdbc3c1845d208661dd75fd335ef93 cc12fcb9e5e6f7afde66f5c3452ed6e3cd6d5390 cc708ae3d7aa084279122c0db7250096f750d6b0 d34491da5aa1593141
sha1cc708ae3d7aa084279122c0db7250096f750d6b008661dd75fd335ef93 cc12fcb9e5e6f7afde66f5c3452ed6e3cd6d5390 cc708ae3d7aa084279122c0db7250096f750d6b0 d34491da5aa159314129c0ff67f957d873703e35 d3c90275dd7279a791
sha1d34491da5aa159314129c0ff67f957d873703e35c3452ed6e3cd6d5390 cc708ae3d7aa084279122c0db7250096f750d6b0 d34491da5aa159314129c0ff67f957d873703e35 d3c90275dd7279a791d717676be15789376f7aa7 d8bfff5139b54b6f98

From the original article

5 min read at cybersecuritynews.com

A newly observed Windows infostealer called Aokigahara is targeting login credentials and session data associated with ChatGPT Desktop, Claude, Codex, and Cursor. The malware searches infected computers for authentication files and application storage, extending familiar password theft into the AI tools developers increasingly use for everyday work. The threat is not evidence that these AI […]

Cyber Security News

By Tushar Subhra Dutta · cybersecuritynews.com

Read the full article at Cyber Security News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.