Aokigahara steals AI sessions alongside developer credentials
Check Point Research identified Aokigahara, a newly observed infostealer, collecting authentication data from seven AI tools alongside developer and cloud credentials. Its targets include Claude, ChatGPT Desktop, Codex, Cursor, Windsurf, GitHub Copilot and Gemini CLI, as well as Git, SSH, and AWS, Azure and Google Cloud data.
Rather than relying only on browser password theft, Aokigahara has routines to gather files and session data AI apps and developer tools keep locally, plus configuration files and keys. That puts AI-service sessions in the same sweep as repository and cloud access material. The research describes what the malware collects, but does not show that operators used or sold the stolen data.
For teams where developers use AI assistants on machines that also hold Git or cloud credentials, one stolen workstation could expose both sides of that access boundary. Whether any recovered sessions or credentials enabled downstream access remains unconfirmed, so the scope is a collection capability—not a demonstrated compromise of those services.
Infostealer riding the AI Train - Check Point Research
Its targets include Claude, ChatGPT Desktop, Codex, Cursor, Windsurf, and GitHub Copilot, alongside cloud credentials and sensitive files from local development environments.