Infostealer riding the AI Train

Summary

An infostealer adds collection routines for AI applications and development tools to its usual targets of browser passwords, session cookies and cryptocurrency wallets. Named targets include Claude, ChatGPT Desktop, Codex, Cursor, Windsurf and GitHub Copilot, along with cloud credentials and sensitive files from local development environments.

Related items

• InfoRapidly scaling online storage to serve over 1 billion ChatGPT users (Part II)Same vendor · OpenAI Blog
• InfoExperts cast doubt on Anthropic report detailing how AI has altered work at the companySame vendor · The Guardian Technology
• HighCVE-2026-107685: req_llm WebSocket streaming client accepts untrusted TLS certificatesSame vendor · NVD/CVE Database
• InfoAI Agents as Insider Threats: Inside Microsoft's Bet on a Unified Security StackSame vendor · Dark Reading
• InfoThe ‘Mythos moment’ has already passed. Now comes the hard part for cybersecuritySame vendor · CSO Online