Malware · 1 source · latest 1h

Infostealers Are Stealing ChatGPT and Claude Tokens That Survive Password Resets

MALWARESpyCloudredteam/daily · 1 source

Severity: High
Sources: 1

What happened

SpyCloud reports recapturing more than 130,000 unique WardenStealer infections since August 2026, with infostealers now targeting AI developer environments. The malware harvests authentication files for ChatGPT and Claude, which can preserve unauthorised access after a password reset. The research describes an expansion of commodity credential theft rather than a flaw in the AI models themselves.

For IT people · Written by AI from 1 source · Wrong?

What to do

Revoke active ChatGPT and Claude sessions and tokens, not just the account password.
Check developer endpoints for infostealer infection before reissuing AI credentials.

Written by AI from the sources, checked against them

Read the full story at the source