Aokigahara infostealer steals AI assistant sessions, Git, SSH and cloud credentials from developer endpoints
Check Point Research (blog.checkpoint.com, research.checkpoint.com) analyzed Aokigahara, a newly observed Windows infostealer seen in the wild that explicitly targets authentication, session and configuration files of AI applications and developer tools. Targeted AI tools include Claude, ChatGPT Desktop, Codex, Cursor, Windsurf, GitHub Co…