Hackers impersonate AI bots to hunt for credentials in credential-hunting campaign
Hackers are impersonating AI services like ChatGPT, Claude, and Perplexity to scan websites for passwords, API keys, and cloud credentials. The campaign, identified by Cequence researchers, uses about 32 fake bot identities to bypass security checks, targeting financial, retail, telecom, energy, and software firms from late September to late October. The scanners made 50–190 requests per target…
Key points
- Hackers impersonate 32 AI bots, including ChatGPT, Claude, and Perplexity, to scan for credentials in credential-hunting campaign
- Scanners made 50–190 requests per target in eight seconds, targeting 48% of Cequence-protected organizations on one October day
- Attackers used over 300 cloud addresses in a week, evading IP-based defenses and distorting AI bot traffic metrics
Hackers Impersonate ChatGPT, Claude, and Perplexity AI Bots to Hunt for Passwords and API Keys
cybersecuritynews.com · 2 November 2026
Loading the full article…
This text was published by cybersecuritynews.com and written by Tushar Subhra Dutta. It is reproduced here with attribution so you can read it in full; the rights remain with the publisher. Read it at the source ↗
The headline, key points and digest above were generated by Digest AI's editorial model from the linked sources. Automated summaries can contain errors: the sources are the record. Spotted a mistake? Tell us. Published by Martin K., who runs Digest AI and handles corrections.
More in Society & Work
All →- Reddit users share how to spot AI-generated voice clones with free tools · 1 src
- Microsoft Copilot speculates Pudgy Penguins may partner with a major brand · 1 src
- Proton users cancel subscriptions after CEO dismisses security testing as 'loser thinking' · 3 src
- Anthropic’s Claude writes Linux exploit for unpatched CVE-2026-98432 · 1 src
- Microsoft patents AI to edit live speech and faces in real time · 4 src
Comments
via GitHub Discussions