New Aoki Malware Targets ChatGPT, Claude, Codex and Gemini to Steal Credentials
Symantec says infostealer Aoki now steals local sessions and credentials for ChatGPT, Claude, Codex, Cursor, and Gemini.
8
Stories per day · 30 days
Relatedaoki3claude3infostealer3llmjacking3chatgpt2credentials2cursor2ai-coding1ai-credentials1gemini1
7 stories, newest first · one card per story
Stories tagged #symantec
Hackers Target Claude, ChatGPT and Cursor Credentials Using Aoki Infostealer
Aoki infostealer now steals Claude, ChatGPT, Cursor, Copilot, and Gemini credentials from developer machines.
10
New Aoki Infostealer Targets AI Coding Assistant Credentials
Symantec says the Aoki infostealer now steals API keys and sessions from AI coding assistants.
12
'Warlock' ransomware used in attacks on critical infrastructure in Portuguese, Spanish-speaking countries
A Chinese group is deploying Warlock ransomware against critical infrastructure via unpatched SharePoint flaws.
1
Attackers Turn Trusted Node.js Runtime Into Malware Delivery Tool in Targeted Attacks
Symantec reports multiple threat actors, including KongTuke, abusing the trusted signed Node.js runtime and blockchain C2 (EtherHiding) to deliver backdoors in targeted attacks.
2
DragonForce Hackers Abuse Microsoft Teams Relays to Hide Backdoor.Turn C2 Traffic
Symantec and Carbon Black found DragonForce-linked hackers using Backdoor.Turn, a Go RAT tunneling C2 through Microsoft Teams TURN relays via QUIC.
2
China-Linked Jewelbug Uses XG-Web for Government Espionage and Crypto Fraud
China-linked Jewelbug runs government espionage and crypto fraud from a single XG-Web browser-based control framework.
2