WardenStealer and Aoki infostealers target ChatGPT, Claude and Codex tokens that survive password resets
- Severity
- High
- Sources
- 1
What happened
WardenStealer (Rust, malware-as-a-service) and Aoki collect OAuth access and refresh tokens, a Codex OpenAI API key, Claude Code MCP server credentials, Claude Desktop configuration and authenticated session cookies from local AI application data. Aoki files are grouped in an AISessions collection folder. SpyCloud reports more than 130,000 unique WardenStealer infections since 3 August 2026 and no CVEs are cited. Defenders should include AI credentials in endpoint infostealer investigations, revoke sessions and tokens rather than relying on password resets, rotate API keys, review API usage for LLMjacking, and audit connected services.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Revoke active AI sessions and tokens on any affected device, not just change the password.
- Rotate exposed API keys and tokens, including Codex and Claude credentials.
- Review unusual API consumption on AI accounts for signs of misuse.
- Check services connected to AI assistants, such as repositories, cloud services and build pipelines, for exposed secrets.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Who and what is in it
Malware
Companies