Attacker spoofed OpenAI and other AI bots to scan for secrets
One actor reached 48% of Cequence-protected organizations that saw AI bot traffic on one October day; nearly all requests failed.
3
Stories per day · 30 days
2 RSS
3 stories, newest first · one card per story
Stories tagged #user-agent-spoofing
Threat actors are posing as AI crawlers to hunt for exposed credentials
GreyNoise observed scanners spoofing AI crawler user agents from 824 IPs to harvest .env files and cloud credentials; no confirmed theft.
3
.png&w=828&q=75)
Threat Actors Are Posing as OpenAI, Anthropic and DeepSeek to Target Credentials and Secrets
GreyNoise observes scanners spoofing OpenAI, Anthropic, and DeepSeek crawler user agents to hunt leaked credentials and secrets.
3