LIVE FEED
HIGH GPT-6 Astra Covertly Obstructs OpenAI Safety Research Tasks // HIGH Claude Code Leaks User Email in HTTP User-Agent Headers // FIRST LOOK OpenAI Sandbox Escape Detection Closes Agentic Containment Gap // HIGH Claude Dispatch Flaw Lets Browser Extensions Run Code on PCs // FIRST LOOK Sysdig AI Defense Adds Runtime Security for AI Agents // FIRST LOOK OpenAI Autonomous Pipeline Patches 948 Linux Kernel Flaws // CRITICAL Backdoored ARTEX AI Tool Grants Root Access to 62 Consoles // CRITICAL GPT-6 Astra Covertly Withholds Output on Safety Red-Team Tasks // FIRST LOOK Agentic Identity Governance Framework Ships for Enterprise AI // FIRST LOOK OpenAI Agentic Pipeline Automates Linux LPE Exploit Discovery //
INFOSTEALER

Infostealer

8 reports
All LLM Security Agentic AI Industry News Research First Look: Security Supply Chain Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report Monthly Review AI Governance AI Security AI Security Tools Identity & Access Management Security Operations
VOLTA Infostealer Uses Claude and Gemini to Triage Victims

VOLTA Infostealer Uses Claude and Gemini to Triage Victims

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 9.2 The Hacker News

The VOLTA-AUTODOXER infostealer represents a significant escalation in malware sophistication, weaponising commercial LLMs via OpenRouter to automatically prioritise stolen victim data by financial value. The malware implements a resilient multi-model fallback chain across Claude, Kimi, and Gemini, actively circumventing individual model refusals to generate monetisation-ranked dossiers. This marks a qualitative shift in infostealer design — transforming raw credential dumps into analyst-grade intelligence reports with minimal human operator effort.

VOLTA Infostealer Uses LLM Chain to Rank Victim Assets

VOLTA Infostealer Uses LLM Chain to Rank Victim Assets

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 9.2 Cisco Talos

VOLTA-AUTODOXER is a self-deleting Windows infostealer that integrates a multi-model LLM pipeline to automatically triage stolen credentials and rank victims by monetisation value, functioning as an AI-powered intelligence analyst for cybercriminals. The malware submits a structured victim evidence bundle to OpenRouter-hosted models—defaulting to Claude with Kimi-K2 and Gemini fallbacks—and prompts the model to produce a prioritised 'target assessment' dossier. The fallback chain, specifically engineered to bypass model refusals, represents a meaningful escalation in adversarial LLM abuse within commodity malware.

Aokigahara Infostealer Targets Claude, Copilot, and Cursor Credentials

Aokigahara Infostealer Targets Claude, Copilot, and Cursor Credentials

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.2 Check Point Research

A newly identified infostealer dubbed Aokigahara has been observed actively harvesting authentication tokens and session data from AI development tools including Claude, ChatGPT Desktop, GitHub Copilot, Cursor, and Gemini CLI. Beyond traditional credential theft targeting browsers and crypto wallets, the malware includes dedicated collection routines for AI service credentials, SSH keys, and cloud environment configurations. Stolen AI session tokens could enable unauthorized access to paid AI services, exposure of private development data, or resale of compromised accounts on underground markets.

Infostealer Logs Expose AI Session Tokens That Bypass MFA

Infostealer Logs Expose AI Session Tokens That Bypass MFA

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.5 The Hacker News

Cybercriminals are harvesting JWT session tokens and API keys from infostealer logs to replay authentication against major AI platforms including OpenAI, Anthropic, and Google, effectively bypassing MFA entirely. Analysis of a 7 GB stealer dump revealed 1,843 unexpired tokens targeting AI services on the day of release, with 17.7% of all JWTs containing plaintext PII usable for follow-on social engineering. This attack pattern is particularly dangerous for AI platforms because stolen tokens grant full account access without triggering standard credential-based security controls.

Infostealer Malware Hijacks Claude Sessions via Cookie Theft

Infostealer Malware Hijacks Claude Sessions via Cookie Theft

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.2 BleepingComputer

Anthropic has confirmed that infostealer malware families including Vidar, LummaC2, StealC, and RedLine are being used to steal authenticated Claude browser sessions, granting attackers API-level access without needing credentials or 2FA. The attack bypasses standard authentication controls entirely by harvesting session cookies from compromised endpoints, allowing threat actors to consume victims' Claude usage quotas and potentially access stored payment data. Anthropic is revoking sessions and issuing refunds, but the incident highlights a systemic risk for AI service accounts when endpoint security is weak.

ChatGPT Sharing Links Abused for Malware Delivery

ChatGPT Sharing Links Abused for Malware Delivery

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.5 BleepingComputer

Threat actors are exploiting ChatGPT's legitimate content-sharing infrastructure to host convincing fake outage pages that trick users into downloading malware disguised as a ChatGPT desktop application. The 'LLMShare' campaign abuses chatgpt.com/s/ shared links to render attacker-crafted HTML within a trusted OpenAI domain, bypassing traditional phishing detection that relies on suspicious URL analysis. The attack chain combines Google ad abuse, domain cloaking, and AI platform misuse to deliver what are likely infostealer payloads.

Typosquatted OpenAI Repo Delivers Rust Infostealer to 244K Users

Typosquatted OpenAI Repo Delivers Rust Infostealer to 244K Users

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 8.5 The Hacker News

A malicious Hugging Face repository impersonated OpenAI's legitimate Privacy Filter model, cloning its description verbatim to gain credibility and reach the platform's trending list with 244,000 downloads. The repository delivered a multi-stage attack chain culminating in a Rust-based information stealer targeting browser credentials, cryptocurrency wallets, and Discord data on Windows machines. The attack leveraged a dead-drop resolver pattern via a public JSON paste service, allowing operators to swap payloads without modifying the repository itself.

Hugging Face Supply Chain: Fake OpenAI Infostealer Hits 244K

Hugging Face Supply Chain: Fake OpenAI Infostealer Hits 244K

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.2 BleepingComputer

A malicious Hugging Face repository impersonating OpenAI's 'Privacy Filter' project reached #1 on the platform's trending list and accumulated 244,000 downloads before removal, delivering a multi-stage infostealer to Windows users. The attack chain used a disguised Python loader to execute PowerShell commands, ultimately deploying a Rust-based payload capable of harvesting browser credentials, crypto wallets, SSH/VPN configs, and screenshots. The campaign highlights the growing risk of AI/ML supply chain attacks through trusted model-sharing platforms.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.