Infostealers Are Targeting AI: What Aokigahara Infostealer Reveals About the New Developer Attack Surface
Check Point, Friday, October 23rd, 2026
Check Point Research says the Aokigahara infostealer targets credentials and sessions for AI tools such as ChatGPT, Claude, Cursor and Copilot.
Check Point notes that AI assistants such as ChatGPT, Claude, Cursor and GitHub Copilot increasingly sit alongside source code, cloud environments and other sensitive resources.
That makes their credentials and sessions valuable to attackers.
New Check Point Research on the Aokigahara infostealer shows the malware specifically collects authentication files, session data and configuration files tied to popular AI applications.
Check Point describes this as a new developer attack surface.