Attackers impersonate ChatGPT, Claude and Perplexity bots to hunt for exposed credentials
THREAT ACTORChatGPTredteam/daily · 2 sources
- Severity
- Medium
- Sources
- 2
What happened
Criminals are pretending to be well-known AI chatbots when they visit company websites. Their goal is to find passwords and access keys that have been left exposed. Organisations should check their sites and tighten access controls.
Like I’m new · Written by AI from 2 sources · Wrong?
What to do
- Do not trust user-agent strings alone; verify AI crawler traffic against published IP ranges or signatures.
- Scan public-facing websites and their source code for exposed passwords, API keys and cloud credentials.
- Rotate any credentials found to be exposed and restrict access to sensitive endpoints.
Written by AI from the sources, checked against them
Full story timeline · 2 updates
Who reported · 2 outlets
GBHackersCyber Security News