Unverified50% confidenceFactExact time
Symantec's threat hunter team released a report stating that an information-stealing trojan (Infostealer) named Aoki has added, in its latest samples, the ability to target the credential files of AI coding assistants.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/17/2026
First Seen
Valid until: 1/15/2027
Sources
Related Entities
Related Claims
VerifiedAI security auditing tools face prompt injection threats, where malicious developers can embed instructions in code comments or strings to induce the tool to overlook vulnerabilities61% similarUnverified2024年已有多份威胁情报报告记录了攻击者利用AI辅助编写钓鱼邮件、生成恶意代码变体和自动化侦察流程的案例61% similarUnverifiedAt the Black Hat conference on August 5, security researchers disclosed a new class of attacks targeting AI coding agents, in which a zero-privilege attacker only needs to open a GitHub Issue in the target repository to induce the agent to execute malicious instructions and steal credentials from the CI environment.61% similarUnverifiedAttackers can exploit stolen AI service account credentials to call API interfaces for computing power theft, and such behavior has frequently appeared in terms-of-service violation reports on platforms such as OpenAI and Anthropic.61% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1050756API
curl https://kongchang.com/api/v1/knowledge/claims/1050756MCP
get_claim(id=1050756)