{"data":{"id":"956fb273-2515-4f56-a740-8296d6a536bf","title":"Infostealer riding the AI Train","summary":"An infostealer adds collection routines for AI applications and development tools to its usual targets of browser passwords, session cookies and cryptocurrency wallets. Named targets include Claude, ChatGPT Desktop, Codex, Cursor, Windsurf and GitHub Copilot, along with cloud credentials and sensitive files from local development environments.","solution":"N/A -- no mitigation discussed in source.","labels":["security","industry"],"sourceUrl":"https://research.checkpoint.com/2026/infostealer-riding-the-ai-train/","publishedAt":"2026-10-23T13:00:09.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["other"],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Anthropic","OpenAI","Microsoft"],"affectedVendorsRaw":["Claude","ChatGPT Desktop","Codex","Cursor","Windsurf","GitHub Copilot"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-23T13:00:09.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null}}