Infostealers Are Targeting AI: What Aokigahara Infostealer Reveals About the New Developer Attack Surface

Check Point Research published findings on the Aokigahara infostealer, malware that specifically collects authentication files, session data and configuration files tied to AI applications and developer tools including ChatGPT, Claude, Cursor and GitHub Copilot. The research frames these stolen credentials and session tokens as a new developer attack surface, since those tools sit alongside source code and cloud environments. Check Point Research says the impact goes beyond access to a single AI account.

AI assistants have quickly become part of everyday work, particularly for developers. Tools such as ChatGPT, Claude, Cursor and GitHub Copilot increasingly sit alongside source code, cloud environments and other sensitive business resources, making the credentials and sessions connected to these tools increasingly important to protect. New research from Check Point Research CPR into the Aokigahara infostealer shows how attackers are adapting to this shift. The malware specifically collects authentication files, session data and configuration files associated with popular AI applications and development tools. The significance goes beyond gaining access to an AI account. If stolen credentials or session tokens … The post Infostealers Are Targeting AI: What Aokigahara Infostealer Reveals About the New Developer Attack Surface https://blog.checkpoint.com/ai-security/infostealers-are-targeting-ai-what-aokigahara-infostealer-reveals-about-the-new-developer-attack-surface/ appeared first on Check Point Blog https://blog.checkpoint.com .