Aoki
An information-stealing trojan (infostealer) that primarily steals sensitive data such as browser passwords, cookies, cryptocurrency wallets and credential tokens. It has added the capability to steal configuration files of AI coding assistants, such as .claude.json and Codex's config.toml.
Timeline (last 90 days)
Symantec's threat hunter team released a report stating that an information-stealing trojan (Infostealer) named Aoki has added, in its latest samples, the ability to target the credential files of AI coding assistants.
Aoki's new samples steal the credential and session files of AI coding assistants, covering tools such as Claude, OpenAI's Codex, Cursor, Codeium, and Gemini.
Aoki's earlier sample versions did not target AI-related files; the ability to target the credential files of AI coding assistants was only added recently.
Aoki still retains its traditional theft targets, including dozens of browsers, crypto wallets, password managers, messaging apps, and VPN and FTP clients.
Symantec's report does not explain how Aoki enters victims' machines, does not name the organization behind it, and does not give the number of victims.
All Facts (5)
Symantec's threat hunter team released a report stating that an information-stealing trojan (Infostealer) named Aoki has added, in its latest samples, the ability to target the credential files of AI coding assistants.
50%UnverifiedAoki's new samples steal the credential and session files of AI coding assistants, covering tools such as Claude, OpenAI's Codex, Cursor, Codeium, and Gemini.
50%UnverifiedAoki's earlier sample versions did not target AI-related files; the ability to target the credential files of AI coding assistants was only added recently.
50%UnverifiedAoki still retains its traditional theft targets, including dozens of browsers, crypto wallets, password managers, messaging apps, and VPN and FTP clients.
50%UnverifiedSymantec's report does not explain how Aoki enters victims' machines, does not name the organization behind it, and does not give the number of victims.
50%