Malware · · 3 min read
A new infostealer goes after AI tool logins as well as passwords
Check Point says Aokigahara steals browser passwords, cookies and wallets, plus sign-in files for AI assistants, Git, SSH keys and cloud accounts. What to do if you’re hit.
Information-stealing malware usually goes after the same things: saved browser passwords, session cookies and crypto wallets. A strain Check Point Research described on October 23, 2026, called Aokigahara, does all of that and adds something newer: the sign-in files of AI assistants and coding tools. If you use AI tools on a Windows PC, here’s what it takes and what to do.
What Check Point found
Check Point’s analysis says Aokigahara is a newly observed Windows stealer, and that an earlier version may have been known as Kamidere or Stygian. It collects:
- saved passwords and cookies from Chrome, Edge, Firefox and many other browsers
- desktop crypto wallets and browser wallet extensions
- Discord, Telegram and Steam data, and other gaming accounts
- password manager data, VPN configurations, FTP clients and email apps
- files from the Desktop, Documents and Downloads folders, a screenshot and the clipboard
What stands out is a module aimed at AI and developer tools. It looks for the files where apps like Claude, ChatGPT Desktop, Codex, GitHub Copilot, Gemini CLI, JetBrains AI Assistant and several AI code editors keep their sign-in tokens and settings. A separate module takes Git credentials, SSH private keys, and AWS, Azure and Google Cloud credentials.
Check Point says stolen AI sessions could be used to run up paid services, resold, or used to read private conversations and uploaded files. It also says its analysis doesn’t confirm how the operators actually make money from the data. The report doesn’t say how the malware is being spread.
What this means for you
Session files are like cookies: they let someone use your account without your password or your two-factor code. If you use an AI assistant for work, a stolen session can expose everything you’ve pasted into it, from code to contracts. For developers, the Git, SSH and cloud keys are often worth more than any single account.
What you can do
- Be careful what you run. Stealers usually arrive through cracked software, fake downloads, game cheats, or fake “verify you’re human” pages that ask you to paste a command. See the tell for fake CAPTCHA pages.
- If you think you ran something bad, clean the computer first. Run a full scan with up-to-date security software, or reinstall Windows if you’re unsure. Changing passwords on an infected PC just hands over the new ones.
- Then sign out everywhere from a clean device. For each important account, including your AI tools, use “sign out of all sessions” or revoke the app’s tokens, then change the password. Our guide on how infostealers steal sessions walks through it.
- Developers: rotate keys. Revoke Git tokens, replace SSH keys, and rotate cloud credentials that lived on that machine. Check your cloud account’s recent activity.
- Use passkeys or hardware keys where you can. They don’t stop session theft, but they stop a stolen password from being reused to sign in fresh.
How Frame helps
Frame keeps a catalog of known breaches and lets you add the ones you know you were part of to a verified email. Frame shows what each one exposed, gives you a short checklist, and counts it in your exposure report. Automatic breach lookups aren’t live yet. We never collect or store the leaked records themselves.
Sources
- Check Point Research, Infostealer riding the AI Train, October 23, 2026
New posts, by email.
About once a month. Plain-language privacy notes, nothing else. I never share your address.