GoKawiilNew 'Aokigahara' Infostealer Targets Credentials for AI Tools Like ChatGPT, Cursor, Copilot
Check Point Software researchers identified a new Windows-based infostealer named Aokigahara that, alongside typical data theft from browsers, VPN clients, crypto wallets and password managers, specifically harvests authentication files, session data and configuration files from AI tools including Claude, ChatGPT Desktop, Codex, Cursor, Windsurf, GitHub Copilot and Gemini CLI. Check Point said this focus on AI and developer tooling sets Aokigahara apart from most stealers currently seen in the wild.