OpenAI, a priority target on the Russian Market<\/h3>\n\n\n\n
<\/p>\n\n\n\n
The vast majority of the data collected is related to OpenAI (88.65 %), followed by HuggingFace (10.69 %) and Mistral (0.28 %)<\/strong>. We observe that Anthropic is virtually absent from the Russian Market metadata. Only about a dozen logs display authentication data linked to anthropic.com or claude.ai. We currently have no clear explanation for this.<\/p>\n\n\n\n What is certain is that Anthropic's services are indeed being targeted by information stealers. Thus, Okta recently got hold of a 7GB dump<\/a> Retrieved from a Telegram channel, it contained stolen data from 5,871 machines in 162 countries. Inside were 561 Anthropic session tokens, 164 of which were still valid. It also contained 24 valid API keys for services such as Gemini, OpenRouter, OpenAI, and Groq.<\/p>\n\n\n\n Some analytical reports also show that infostealer developers are strengthening their products with features that specifically target AI-related data. For example, Check Point researchers discovered in <\/a>the infostealer Aokigahara<\/a> a new module called "aisesessions"\u00ab<\/strong>, It is capable of collecting authentication and configuration files from Claude (Code and Desktop), ChatGPT Desktop, Codex, Cursor, Windsurf, GitHub Copilot, or Gemini CLI. It also retrieves AWS, Azure, and Google Cloud credentials, SSH keys, and Git access.<\/p>\n\n\n\n Gen Digital makes the same observation with Warden Stealer<\/a>, a malware-as-a-service written in Rust. It has been promoted on underground forums since August 2026. Its version 1.9, announced at the end of September, officially claims the collection of code agent tokens<\/strong>. According to Gen, these files can contain access and refresh tokens, identifiers stored in MCP configurations, as well as\u2026 prompt histories and conversation databases.<\/p>\n\n\n\n Indeed, the market value of a stolen AI account is not limited to authentication data. It can also come from other valuable information that threat actors can monetize: source code, documents, sensitive data, integrations, API keys, etc.<\/p>\n\n\n\n From an AI data perspective, Warden is currently enjoying significant growth on the Russian Market. It is one of the two infostealers showing the most growth since August, the other being StealC.<\/p>\n\n\n\n AI accounts are thus joining the list of data that infostealers monetize, alongside session cookies and cloud access. Whether this development stems from deliberate targeting or simply the widespread adoption of these services, the result is the same: valid access credentials are circulating, and they are not protected by MFA, which only covers the connection itself and not the subsequent session.<\/p>\n\n\n\n A few precautions are necessary. First, if you have any doubts about a position, revoke sessions and renew API keys<\/strong>, because simply changing your password doesn't invalidate a token that has already been stolen. Furthermore, reduce the lifespan of access<\/strong> (short tokens, refresh token rotation, device-bound sessions when the provider allows it) and do not leave secrets in plain text in agent or MCP server configurations. Finally, treat AI accounts like any other corporate identity asset, with monitoring of abnormal connections and usage<\/strong>. The starting point remains the infection of the workstation: fake installers, cracks and ClickFix remain the main entry points.<\/p>\n\n\n\n <\/p>\n\n\n\n Anticipating: CTI at the heart of clandestine markets<\/strong> Infostealers are evolving rapidly, and their operators are regularly adding modules dedicated to AI tools. Our team of Cyber Threat Intelligence<\/a> It continuously monitors log marketplaces, Telegram channels, and emerging stealer families to detect exposure of your accounts, tokens, and API keys. This information is transformed into actionable alerts and detection rules, so you can revoke compromised access before it's reused.<\/p>\n\n\n\n Detect: identify infection and session replay<\/strong> A stolen token bypasses MFA because it represents an already authenticated session. Our SOC and our MDR services<\/a> They monitor both workstations, to spot typical infostealer behavior, and connections, to identify abnormal usage: unusual geolocation, different device fingerprint, activity outside the holder's hours.<\/p>\n\n\n\nModules dedicated to AI data<\/h3>\n\n\n\n
Warden and StealC are booming<\/h3>\n\n\n\n
![\"\"](\"https:\/\/www.intrinsec.com\/wp-content\/uploads\/2026\/10\/stealer_IA-1024x561.png\")
How Intrinsec protects you against AI authentication data theft<\/strong><\/h2>\n\n\n\n