ai-devtools —

Credential scanning attacker impersonates OpenAI, Anthropic, Meta bots

A malicious actor has been observed persistently scanning for sensitive credentials by adopting the guise of automated agents originating from major AI providers such as OpenAI, Anthropic, and Meta.

Credential scanning attacker impersonates OpenAI, Anthropic, Meta bots

This threat actor was operating by utilizing bots that mimicked the identities of agents associated with OpenAI, Anthropic, Meta, and other entities, with the objective of locating data that had been left unsecured.

This activity highlights an evolving vector of attack where established AI platforms are being leveraged or impersonated to facilitate reconnaissance against infrastructure.

Reported by darkreading.com.

ai-devtoolssecurity

Related coverage

Elsewhere in this edition