'Aokigahara' Stealer Targets 'Developer Keyrings' & AI Assistants

Summary

A malware family named Aokigahara, described as an infostealer, targets developer credentials and AI assistant sessions. According to the source, its focus on AI tools extends the traditional infostealer approach, exposing AI sessions, sensitive business data and developer infrastructure from a single compromised endpoint.

Related items

• HighGHSA-3w55-933p-8pv5: Strands Agents: Local Privilege Escalation via Symlink Attack in Default Session File StorageSimilar attack · GitHub Advisory Database
• HighGHSA-g5ff-637f-6q2m: LiteLLM: internal_user_viewer arbitrary local file read via `vertex_ai_credentials`Similar attack · GitHub Advisory Database
• MediumGHSA-hhww-mrg2-969h: LiteLLM vulnerable to reflected XSS in /sso/debug/callbackSimilar attack · GitHub Advisory Database
• HighCVE-2026-117573: hagent OS command injection through args in arduino and esp32 MCP toolsSimilar attack · NVD/CVE Database
• HighCVE-2026-117567: esp-mcp OS command injection through MCP tool parametersSimilar attack · NVD/CVE Database