Imposter abused trust in OpenAI, Anthropic, and 30 others to hunt for secrets

Summary

A single threat actor posed as roughly 32 AI bots, including ones claiming to be from OpenAI, Anthropic, and Meta, while scanning organizations in finance, retail, telecom, energy, and software from late September through late October 2026. The scanner requested about 90 file paths that commonly hold credentials, such as .env files, cloud credential files, and private SSH keys, and reached 48% of Cequence-protected organizations that saw any AI bot traffic on one October day. Cequence reported no breach.

Mitigation

Cequence recommends verifying AI crawlers through published address ranges, signed requests, or direct integrations rather than relying on self-reported identities. Security teams should also flag bots that request credential files, keep secrets out of web-accessible directories, and assess automated traffic based on its behavior. Shane Barney of Keeper Security advises extending zero-trust controls and least-privilege policies to AI agents, API keys, and service accounts, and replacing long-lived local credentials with centrally managed secrets.

Related items

• InfoAdversa AI Launches Coding Agent Security Platform to Block Cyberattacks on AI Agents in Real TimeSame vendor · Adversa AI Blog
• InfoWe urgently need to monitor AI agents’ actions in real timeSame vendor · MIT Technology Review
• MediumShadowy AI Relay Disables OpenAI Codex, Claude Code SandboxesSame vendor · Dark Reading
• MediumNIK C2: The new AI-enabled command-and-control frameworkSame vendor · Cisco Talos Blog
• InfoQuoting Ted SandersSame vendor · Simon Willison's Weblog