Aokigahara Stealer Grabs Your Claude, Cursor and Copilot Sessions
Check Point says the new Aokigahara infostealer has a dedicated module for AI assistant and coding-tool sessions, plus cloud configs, SSH keys, browsers and crypto wallets.
YARA
Stories with published YARA rules, reproduced exactly as their authors wrote them, ready to copy into your scanner.
2 stories match your filters.
Fake ‘GPT-6’ and Claude Apps Hide a Miner Behind Real Signed Installers
Check Point's Yoba campaign pairs genuine signed OpenAI and Anthropic installers with a sideloaded DLL on fake GitHub AI-app pages, installing a hidden XMRig miner via a Telegram-seeded DGA.