EN PT-BR
← Voltar ao feed
medium financial services retail telecommunications energy software

Actor impersonating ~32 AI bot identities (OpenAI, Anthropic, Meta, Perplexity) scans enterprise sites for exposed secrets

2 fonte(s) · 2 atualização(ões) · publicado 28/10/2026 11:37 · coletado há 19 horas

Matéria consolidada. Reúne 2 matérias que o Tifon tinha publicado separadamente sobre a mesma história. A IA reescreveu o relatório com o que as 2 fontes trouxeram em 03/11/2026 00:11; os links antigos trazem para cá.

Fontes: gbhackers.com ↗ darkreading.com ↗

A single threat actor has been scanning enterprise websites for exposed credentials and data while disguising its traffic as crawlers and agents from AI companies such as OpenAI, Anthropic and Meta (darkreading.com, 2026-10-28). The activity abuses the trust web servers give to AI bots. Cequence later detailed the campaign (gbhackers.com, 2026-11-02): the actor rotated through about 32 AI bot identities, including ChatGPT, Claude and Perplexity, to look for exposed passwords, API keys and cloud credentials. On one October day the activity reached 48% of Cequence-protected organizations that received any AI bot traffic. It was observed from at least late September through late October and targeted financial services, retail, telecommunications, energy and software organizations. Nearly all requests were blocked or failed, and the findings do not establish widespread credential theft. The earlier darkreading.com piece was only a teaser and gave no actor identity, tooling or scale.

Detalhes técnicos

  • The scanner ran from a major cloud provider and impersonated crawlers and assistants tied to OpenAI, Anthropic, Meta, Perplexity and others (gbhackers.com).
  • It requested roughly 90 paths tied to exposed secrets: .env files, cloud credential files, private SSH keys and server environment information (gbhackers.com).
  • Each source address sent bursts of about 50 to 190 requests in eight seconds before moving on (gbhackers.com).
  • It first requested random nonexistent paths to find sites that return responses whether or not a resource exists (gbhackers.com).
  • Tells of impersonation (gbhackers.com):
    • It rotated evenly through all 32 identities.
    • It claimed competing AI providers within seconds from the same machine.
    • It reused Anthropic's crawler contact address across different Claude identities.
  • The actor used over 300 cloud IPs in one day and nearly 400 in one week. None seen in late September reappeared a month later. Threat feeds flagged many addresses only after the scanner had moved on, so stable request patterns were a better continuity signal than infrastructure (gbhackers.com).
  • The impersonator generated more than 80% of purported AI bot traffic at several organizations, inflating estimates of legitimate agent adoption (gbhackers.com).
  • The article distinguishes this from Axios reporting on unvetted agents accessing U.S. bank accounts, which generally involved customer-provided credentials (gbhackers.com).

Remediação

  • Never grant automatic trust based on a claimed AI affiliation. Verify via signed requests, published network ranges or direct integrations (gbhackers.com).
  • Continuously assess requested resources and activity patterns, combining identity verification with behavioral enforcement (gbhackers.com).
  • Remove secrets from web-accessible locations and review exposed staging and administrative systems (gbhackers.com).

Linha do tempo

  1. gbhackers.com ↗ · pub. 02/11/2026 05:13 · coletado 02/11 06:00

    Actor impersonates ~32 AI bot identities (ChatGPT, Claude, Perplexity) to scan sites for exposed secrets, per Cequence

    ler a análise desta fonte

    Cequence reported a scanning campaign in which a single actor rotated through about 32 AI bot identities, including ChatGPT, Claude, and Perplexity crawlers, to probe enterprise websites for exposed passwords, API keys, and cloud credentials. On one October day the activity reached 48% of Cequence-protected organizations that received any AI bot traffic. Cequence observed it from at least late September through late October, targeting financial services, retail, telecommunications, energy, and software organizations. Nearly all requests were blocked or failed, and the findings do not establish widespread credential theft.

    Technical Details

    • The scanner ran from a major cloud provider and impersonated crawlers and assistants tied to OpenAI, Anthropic, Meta, Perplexity, and others.
    • It requested roughly 90 paths tied to exposed secrets: .env files, cloud credential files, private SSH keys, and server environment information.
    • Each source address sent bursts of about 50 to 190 requests in eight seconds before moving on.
    • It first requested random nonexistent paths to identify sites that return responses regardless of whether a resource exists.
    • Tells: it rotated evenly through all 32 identities, claimed competing AI providers within seconds from the same machine, and reused Anthropic's crawler contact address across different Claude identities.
    • The actor used over 300 cloud IPs in one day and nearly 400 in one week; none seen in late September reappeared a month later. Threat feeds flagged many addresses only after the scanner had moved on, so stable request patterns were a better continuity signal than infrastructure.
    • The impersonator generated more than 80% of purported AI bot traffic at several organizations, inflating estimates of legitimate agent adoption.
    • The article says this is distinct from Axios reporting on unvetted agents accessing U.S. bank accounts, which generally involved customer-provided credentials.

    Remediation

    • Never grant automatic trust based on a claimed AI affiliation; verify via signed requests, published network ranges, or direct integrations.
    • Continuously assess requested resources and activity patterns, combining identity verification with behavioral enforcement.
    • Remove secrets from web-accessible locations and review exposed staging and administrative systems.
  2. darkreading.com ↗ · pub. 28/10/2026 11:37 · coletado 28/10 12:00 primeiro registro só resumo do feed

    Threat Actor Impersonates AI Bots from OpenAI, Anthropic and Meta to Scan for Exposed Credentials

    ler a análise desta fonte

    A threat actor has been conducting persistent scanning for exposed credentials and data while disguising its traffic as bots from AI companies, including OpenAI, Anthropic and Meta. The activity abuses the trust that web servers place in AI crawlers and agents to probe for exposed sensitive data. The source article provides only a brief teaser, so the actor's identity, tooling, scale, and any resulting compromises are not stated.