WardenStealer and Aoki infostealers target ChatGPT, Claude and Codex tokens that survive password resets
MALWAREChatGPTredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
Two types of criminal software, WardenStealer and Aoki, are stealing login tokens and session files from AI tools such as ChatGPT, Claude and Codex on Windows computers. These stolen items can keep working after a victim changes their password, so attackers may still get into the accounts. Users should revoke old sessions and keys, not just change their passwords.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- Revoke active AI sessions and tokens on any affected device, not just change the password.
- Rotate exposed API keys and tokens, including Codex and Claude credentials.
- Review unusual API consumption on AI accounts for signs of misuse.
- Check services connected to AI assistants, such as repositories, cloud services and build pipelines, for exposed secrets.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Cyber Security News
Who and what is in it
Malware
Companies