A newly discovered information stealer, dubbed Aokigahara, is targeting AI applications and developer tools, gathering session data, authentication files, and cloud secrets along with browser passwords and cryptocurrency wallet information. Check Point Research discovered specific routines for Claude, ChatGPT Desktop, Codex, Cursor, Windsurf, GitHub Copilot, and Gemini CLI. The findings reveal how attackers are expanding their attacks beyond personal accounts to target the services developers use for coding, infrastructure management, and accessing AI assistants.
Additionally, it collects AWS credentials, single sign-on cache data, Amazon Q databases, and files associated with Kiro, Codeium, Visual Studio Code, and JetBrains AI Assistant. Unauthorized use of paid accounts, resale of accounts, and potential extortion remain plausible risks rather than confirmed operator activities. Beyond AI tools, Aokigahara captures screenshots and clipboard contents, steals browser cookies and saved logins, and collects cryptocurrency wallet data.
Depending on configuration, it examines debugger indicators, virtual machine artifacts, hardware resources, running processes, cursor movement, usernames, and computer names. AES-256-CBC encryption safeguards settings that include command-and-control addresses, module selection, analysis checks, certificate pinning options, and fallback servers. Indicators of Compromise Indicator Type Indicator Description IP address and 26.252.48:8080 Reported Aokigahara command-and-control endpoint Domain dfwioeiofwr.info Reported command-and-control infrastructure
