/
← Voltar ao feed
medium technology software development

Aoki infostealer adds theft of AI coding assistant credentials, tokens and session files

1 fonte(s) · 1 atualização(ões) · publicado 15/10/2026 10:00 · coletado há 1 dia

Symantec's Threat Hunter Team reports that new versions of the Aoki infostealer now target credential and session files used by AI coding assistants. Earlier versions focused on browser, cryptocurrency wallet and password manager data. Aoki is a relatively new and sparsely documented stealer, first observed earlier in 2026, and its AI-related capabilities are recent and appear to be expanding. Symantec does not know which group is behind it and sees no links to any existing malware family. The focus on cryptocurrency wallets and extensions suggests the operators are financially motivated.

Detalhes técnicos

  • The newest observed version targets .claude.json, Claude desktop cookies, ChatGPT cookies, and the Codex config.toml and .env files.
  • It also steals tokens for GitHub Copilot, Cursor, Gemini, JetBrains AI Assistant and Kiro, along with AWS credentials.
  • Stolen keys and tokens let an attacker act under a legitimate developer's identity and API quota, bypassing safeguards that assume requests come from a trusted user.
  • The tokens can also expose connected repositories, cloud services and CI/CD pipelines linked to the account.
  • Stolen AI keys can be resold or used to run up usage on the victim's account (LLMjacking). Symantec assesses that threat actors now value AI credentials as highly as payment card data and crypto wallets.

Remediação

The article gives no specific remediation guidance.

Linha do tempo

  1. infosecurity-magazine.com ↗ · pub. 15/10/2026 10:00 · coletado 20/10 16:31 primeiro registro

    Aoki infostealer adds theft of AI coding assistant credentials, tokens and session files

    ler a análise desta fonte

    Symantec's Threat Hunter Team reports that new versions of the Aoki infostealer now target credential and session files used by AI coding assistants. Earlier versions focused on browser, cryptocurrency wallet and password manager data. Aoki is a relatively new and sparsely documented stealer, first observed earlier in 2026, and its AI-related capabilities are recent and appear to be expanding. Symantec does not know which group is behind it and sees no links to any existing malware family. The focus on cryptocurrency wallets and extensions suggests the operators are financially motivated.

    Technical Details

    • The newest observed version targets .claude.json, Claude desktop cookies, ChatGPT cookies, and the Codex config.toml and .env files.
    • It also steals tokens for GitHub Copilot, Cursor, Gemini, JetBrains AI Assistant and Kiro, along with AWS credentials.
    • Stolen keys and tokens let an attacker act under a legitimate developer's identity and API quota, bypassing safeguards that assume requests come from a trusted user.
    • The tokens can also expose connected repositories, cloud services and CI/CD pipelines linked to the account.
    • Stolen AI keys can be resold or used to run up usage on the victim's account (LLMjacking). Symantec assesses that threat actors now value AI credentials as highly as payment card data and crypto wallets.

    Remediation

    The article gives no specific remediation guidance.