The Aoki infostealer has expanded its capabilities to target credentials and session files used by AI coding assistants, including Claude, OpenAI Codex, Cursor, and GitHub Copilot. This change puts developer accounts and connected services at risk, extending the malware's reach beyond browser passwords and cryptocurrency wallets. CYFIRMA previously reported on the Aokigahara Stealer in an August intelligence report, detailing Windows execution, file operations, and external communications.

The key difference between credentials and source code lies in the fact that Aoki primarily collects authentication and session files rather than directly stealing source code. However, Cursor's local state database can store cached chat context and code snippets, adding another layer of exposure. Targeted information includes cookies, saved passwords, autofill records, payment details, browsing history, and Google tokens.

It targets cryptocurrencies through browser extensions such as MetaMask and Phantom, as well as desktop wallets like Exodus, Electrum, and Bitcoin Core. Additionally, Cursor searches filenames for terms related to recovery materials, such as mnemonic, private key, passphrase, keystore, and 24-word phrases. Indicators of Compromise Type SHA-256 Hash Detection SHA-256 752c8e64af60960b85cf00e4bd34eb459e24b7939464f718ec18494df43b4b69 Infostealer.Aoki SHA-256 bf037920d39b85572ec7e53b51f09c28198c2c0afbc7c7d6cf639b1f047caebf Infostealer.Aoki Join 16,000+ SOC teams using ANY.RUN to streamline threat investigations and reduce manual effort.