New Aoki Malware Targets ChatGPT, Claude, Codex and Gemini to Steal Credentials

Aoki, also known as Aokigahara, is a data-stealing malware that has added credentials for AI tools to its growing list of targets. Recent versions seek local files and session data linked to ChatGPT, Claude, OpenAI Codex, Cursor, Codeium and Gemini. The change raises the risk for developers who use AI assistants alongside source-code repositories, cloud accounts and other work systems. Unlike a flaw in an AI service, Aoki’s activity focuses on data stored on an infected computer. A stolen key or token may let an intruder use an account as its owner, run up paid usage or reach services connected to that account. Earlier Aoki samples did not search for AI-related files, suggesting this is a newer addition to the malware’s...

Read the full article at the source.