Stolen LLM API tokens driving illicit charges above $100,000 a day
Mandiant says some victims reached about $1 million before cutting access; one intruder made over 500,000 calls in under eight hours.
1
Stories per day · 30 days
4 RSS
Relatedandroid4microsoft-authenticator4entra3microsoft-3653aitm2oauth2api-keys1bec1cloud1device-code-phishing1gheist1github1github-actions1identity1improper-authentication1inbox-rules1jet-night1llmjacking1
29 stories, newest first · one card per story
Stories tagged #token-theft
Authenticator for Android flaw let apps steal work tokens (CVE-2026-80097)
Fixed in version 6.2606.4246; Microsoft says it was not used in attacks and rates exploitation less likely.
1
Stolen login tokens used to hijack Microsoft 365 accounts at 79 organizations
Huntress counted 497 successful sign-ins and more than 200,000 failures from July 14 to September 22, 2026.
1
Microsoft Authenticator Android flaw let apps steal work tokens
Versions before 6.2606.4246 are affected; Microsoft rated CVE-2026-80097 at CVSS 8.6 and shipped a fix on September 8, 2026.
1
Gheist uses stolen GitHub tokens to leak private repository secrets
Wiz found over 13,500 planted branches from more than 850 accounts; GitHub held public runs but not private ones.
1
Android Microsoft Authenticator flaw let apps steal account tokens
CVE-2026-80097, scored 8.6, affects builds before 6.2606.4246; a zero-permission app could impersonate Microsoft apps.
1
Android Authenticator flaw let apps steal work tokens
An installed app with no permissions could impersonate Teams and obtain Graph tokens; fixed in 6.2606.4246.
1
Token-spraying campaign hits Microsoft 365 accounts for email fraud
Huntress counted at least 200,000 login attempts and 497 successful sign-ins from July to September 2026.
1
OAuth token theft bypasses MFA and outlives password resets, Unit 42 says
Stolen access and refresh tokens can persist for days or months and move across services tied to the same identity.
2
Fixed Plex Media flaws exploited to install malware
The public chain uses unauthenticated SSRF, a loopback pivot, and token theft to run a payload.
MCP Python SDK OAuth Flaw Lets Malicious Servers Hijack AI Agent Accounts
Malicious MCP servers can hijack OAuth tokens from vulnerable MCP Python SDK clients to take over AI agent accounts; patched in 1.30.0 and 2.2.0.
3
OAuth Token Theft Through Microsoft's Front Door | Huntress
Huntress details a WWAHost.exe AppX sideloading technique that presents Microsoft's real OAuth login and harvests tokens that survive MFA.
Meta’s Muse AI Assistant Rolled Out With a Serious Security Flaw
Zero-day in Meta's Muse macOS AI assistant let any local app redirect transcription and steal account-control tokens; Meta released a hotfix.
Microsoft Warns of EvilTokens AI Phishing Service Hijacking Thousands of Accounts
EvilTokens PaaS hijacks device-code auth to steal tokens and enable BEC at scale, compromising 12,000+ inboxes across 10,000+ organizations.
2
Microsoft disrupts EvilTokens phishing service that gave criminals access to 12,000 inboxes
Microsoft and partners seized EvilTokens infrastructure after the phishing service compromised over 12,000 inboxes.
1
Unmasking EvilTokens: Getting to the root of device code phishing
Microsoft details the EvilTokens/Storm-2992 device-code phishing operation and shares Defender detections after disrupting the AI-powered platform.
5
Meta’s Muse AI assistant has a zero-day that can turn it into a Mac backdoor
Patrick Wardle says a local zero-day can redirect Meta Muse dictation traffic and steal its account token.
MFA Won't Save You From OAuth Consent Abuse
MFA cannot prevent OAuth consent abuse; organizations need OAuth governance, least-privilege scopes, consent monitoring, and rapid token revocation.
GhostCode attackers abuse device codes to take over Microsoft 365 accounts
GhostCode phishing kit abuses Microsoft's OAuth device authorization flow to harvest tokens, register devices, and steal primary refresh tokens from M365 victims.
5
In Other News: Ransomware Developer Sentenced, Plugin4Shell AI Attack, Critical SAP Flaw
SecurityWeek roundup: ransomware developer sentenced, critical SAP flaw CVE-2026-44756, PhantomRaven npm info-stealer, WordPress mass exploitation, and AI agent security findings.
4
GhostCode Phishing Kit Bypasses Microsoft 365 MFA to Hijack Accounts in 78 Seconds
eSentire identified GhostCode, a phishing kit abusing Microsoft 365 OAuth device-code sign-in to steal tokens and take over accounts in seconds.
6
N0va Phishkit Targets US and EU Businesses: A New Challenge for Identity Security
N0va phishkit targets US and EU organizations with trusted-brand lures, capturing tokens via legitimate authentication flows to gain SSO access to corporate resources.
7
NIST and CISA finalize playbook to stop token theft and forgery
NIST and CISA finalized NIST IR 8587, a playbook helping federal agencies and cloud providers defend identity tokens against theft and forgery.
Mapping out your unknown: A threat hunter’s guide to GitHub
Datadog Security Labs publishes a threat-hunting guide with audit-log queries to detect GitHub token theft, device code phishing, and source code exfiltration.
8