SEC.01 / AI Tools & Prompts
Aoki Malware Now Targets AI Coding Tool Tokens: What Claude, Codex and Cursor Users Should Lock Down
New Aoki infostealer builds target .claude.json, Codex config and .env files, desktop cookies, and tokens for Copilot, Cursor, Gemini and AWS. What the malware takes, why AI credentials are valuable, and how to lock them down.