GoKawiilFake AI-bot scanner probes 48% of Cequence-protected firms for leaked credentials
Cequence Security's CQ Prime Research found a threat actor impersonating 32 AI bots—including ones mimicking OpenAI, Anthropic, Perplexity and Meta—to search organizations for exposed passwords, API keys and cloud credentials. The scanner has run since late September, hit firms across retail, finance, telecom, energy and software, and on Oct. 21 alone reached 48% of Cequence-protected organizations, though nearly all requests were blocked or failed.
GoKawiil's interpretation of the reporting above, not reported fact.
The campaign points to attackers testing which AI agents companies trust, then disguising malicious traffic as those trusted bots to slip past access controls, according to researcher Will Glazier. This suggests security teams face a growing, time-sensitive challenge in distinguishing legitimate AI crawlers from impersonators as AI agent traffic becomes routine on corporate networks.
- A scanner impersonated 32 AI bots to hunt for exposed credentials across multiple industries.
- On Oct. 21, 48% of Cequence-protected organizations saw this malicious bot traffic, though most requests failed.
- Researchers say attackers are probing which AI agents businesses trust in order to impersonate them convincingly.
YubiKey 5C NFC Security Key — With credential-stuffing bots impersonating AI crawlers to hunt for exposed passwords and API keys, hardware-based authentication is a smart defensive layer. A YubiKey adds phishing-resistant multi-factor authentication so stolen credentials alone can't grant access to your accounts or cloud consoles.
See YubiKey 5C NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: darkreading.com — Elizabeth Montalbano, 2026-10-28
Published there as: “Attacker Relentlessly Scans for Credentials by Impersonating AI Bots”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.