Infostealer riding the AI Train

Key Points Introduction Infostealers commonly target browser passwords, session cookies, and cryptocurrency wallets. This malware combines those established capabilities with dedicated collection routines for AI applications and development tools. Its targets include Claude, ChatGPT Desktop, Codex, Cursor, Windsurf, and GitHub Copilot, alongside cloud credentials and sensitive files from local development environments.

Published 23-Oct-2026 14:38 UTC · First seen 23-Oct-2026 14:37 UTC

Sources

• Check Point Research · 23-Oct-2026