INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Lazarus Group Deploys Infostealer via Spear-Phishing Attack on AI Systems

| 2026-10-23 16:09 LOW HIGH DATA BREACH MALWARE & BOTNETS
JSON
Executive Summary
AI-generated
A newly identified infostealer, Aokigahara, has targeted AI applications and development tools such as Claude, ChatGPT Desktop, Codex, Cursor, Windsurf, GitHub Copilot, and Gemini CLI. The malware collects authentication files, session data, and configuration files from these services, alongside developer credentials like Git files, SSH private keys, and AWS, Azure, and Google Cloud credentials. Stolen AI credentials could enable unauthorized access to paid services, account resale, or data extortion. The Aokigahara infostealer employs anti-analysis techniques including language checks, virtual machine detection, and control-flow flattening, using AES-256 encryption with X25519 key exchange for command-and-control communications. An IP address associated with the malware is [IOC HIDDEN • LOGIN REQUIRED], linked to domains [IOC HIDDEN • LOGIN REQUIRED] and [IOC HIDDEN • LOGIN REQUIRED].
Technical Mitigations AI-generated
• Use AES-256 encryption with X25519 key exchange for command-and-control communications to prevent unauthorized access. • Implement language checks, virtual machine detection, and control-flow flattening anti-analysis techniques in AI applications and development tools to detect Aokigahara malware. • Block or hunt for indicators of compromise such as <a href="/auth/login?next=/detail/WWQSfaEBo0ihlvYpVe1A" class="ioc-censored-pill text-decoration-none" title="Protected IoC: Sign in to view" data-bs-toggle="tooltip"><span class="badge bg-black text-warning border border-warning border-opacity-75 font-monospace ioc-lock-tag align-middle"><i class="bi bi-lock-fill me-1"></i>[IOC HIDDEN &bull; LOGIN REQUIRED]</span></a> <a href="/auth/login?next=/detail/WWQSfaEBo0ihlvYpVe1A" class="ioc-censored-pill text-decoration-none" title="Protected IoC: Sign in to view" data-bs-toggle="tooltip"><span class="badge bg-black text-warning border border-warning border-opacity-75 font-monospace ioc-lock-tag align-middle"><i class="bi bi-lock-fill me-1"></i>[IOC HIDDEN &bull; LOGIN REQUIRED]</span></a> • Use secure credentials management practices to protect Git files, SSH private keys, and AWS, Azure, and Google Cloud credentials from unauthorized access. • Regularly monitor for configuration file collection by Aokigahara malware in AI services.
Technical Observables 20 IoCs Login Required
Indicators of Compromise (IoCs) Protected

Raw threat telemetry, malicious IP addresses, file hashes, and direct VirusTotal correlation are restricted to authenticated users.

Sign In to View 20 IoCs Create Free Account
sha1 3 sha256 11 domains 2 ips 1 md5 3
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
Global Scope cryptocurrencycryptocurrency
Incident Timeline
‎2026/10/23
Threat actors used the Aokigahara infostealer to target specific AI applications and development tools, including Cursor, Windsurf, Claude, GitHub Copilot, and others.
infrastructure Cursor
Its distinguishing feature is dedicated targeting of AI applications and development tools, including Claude, ChatGPT Desktop, Codex, Cursor, Windsurf, GitHub Copilot, and Gemini CLI.
infrastructure Windsurf
Its distinguishing feature is dedicated targeting of AI applications and development tools, including Claude, ChatGPT Desktop, Codex, Cursor, Windsurf, GitHub Copilot, and Gemini CLI.
organisation Claude
Its distinguishing feature is dedicated targeting of AI applications and development tools, including Claude, ChatGPT Desktop, Codex, Cursor, Windsurf, GitHub Copilot, and Gemini CLI.
organisation GitHub Copilot
Its distinguishing feature is dedicated targeting of AI applications and development tools, including Claude, ChatGPT Desktop, Codex, Cursor, Windsurf, GitHub Copilot, and Gemini CLI.
organisation Infostealer
Infostealer riding the AI Train.
organisation FTP
Aokigahara is a newly identified infostealer with traditional data theft capabilities targeting browsers, VPN clients, cryptocurrency wallets, FTP/SFTP clients, password managers, and email applications.
organisation SSH
The malware collects authentication files, session data, and configuration files from these AI services, alongside developer credentials such as Git files, SSH private keys, and AWS, Azure, and Google Cloud credentials.
organisation AWS
The malware collects authentication files, session data, and configuration files from these AI services, alongside developer credentials such as Git files, SSH private keys, and AWS, Azure, and Google Cloud credentials.
Tactical Metrics
Metrics
infrastructure
‎Cursor
Affected Product
Its distinguishing feature is dedicated targeting of AI applications and development tools, including Claude, ChatGPT Desktop, Codex, Cursor, Windsurf, GitHub Copilot, and Gemini CLI.
Metrics
infrastructure
‎Windsurf
Affected Product
Its distinguishing feature is dedicated targeting of AI applications and development tools, including Claude, ChatGPT Desktop, Codex, Cursor, Windsurf, GitHub Copilot, and Gemini CLI.
Intelligence Sources
AlienVault OTX 2026-10-23