Infostealer riding the AI Train
Aokigahara, a new infostealer malware, has been spotted targeting AI applications and development tools alongside traditional data theft capabilities.
Aokigahara, a newly observed infostealer, has been spotted in the wild. An earlier version may have been known as Kamidere or Stygian. The malware includes traditional data theft capabilities targeting browsers, VPN clients, cryptocurrency wallets, FTP/SFTP clients, password managers, and email applications, among other targets.
AI Applications Targeted
The stealer specifically targets AI applications and development tools, collecting authentication files, session data, and configuration files associated with Claude, ChatGPT Desktop, Codex, Cursor, Windsurf, GitHub Copilot, Gemini CLI, and other tools. This represents a significant expansion beyond traditional data theft targets.
This expanded targeting reflects a broader shift in what attackers may consider valuable, not only personal accounts and financial data, but also access to AI services and the environments developers use to build software.
Cloud and Developer Access
The malware's collection scope extends to developer and cloud environments. It targets Git credential files, SSH private keys, and AWS, Azure, and Google Cloud credential and configuration files. Stolen AI credentials could offer opportunities for monetization through unauthorized access to paid services or resale of compromised accounts.
Comprehensive Data Theft
Aokigahara includes common information-stealing capabilities such as screenshot capture, clipboard collection, browser credential and cookie theft, cryptocurrency wallet data collection, and file grabbing. It also targets Chromium-based browsers, Mozilla Firefox, desktop cryptocurrency wallets, messaging applications like Discord and Telegram, gaming platforms, and password managers.
Related
