Scanner used 32 AI identities to probe credential files
CQ Prime Research reported that a scanner impersonating 32 AI bots had probed organizations for credential-bearing files since late September. The activity targeted organizations in retail, financial services, telecommunications, energy, and software.
The scanner rotated evenly among identities associated with real AI bots, including OpenAI, Anthropic, Meta, and Perplexity, and sent bursts of 50 to 190 requests in about eight seconds. That pattern differs from genuine bots and helped identify the impersonation. The report says nearly all requests were blocked or failed and found no successful credential exposure.
For organizations that allow traffic based on recognized bot names, a claimed identity can become a route toward files containing passwords, API keys, or cloud credentials. The report documents probing, not a confirmed compromise; it does not establish whether other organizations’ bot-identity rules would let the scanner through.