[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fbp202vk7TgcR65ySvrC5eiDtgNH9bcsCqWpITI9VJTs":3},{"article":4,"iocs":55,"watch_terms":61,"solutions":62,"lesson":164},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"6461d949-3926-461e-8e4c-25f3827ddbbd","Infostealer Logs Expose Replayable AI Tokens That Can Bypass MFA","infostealer-logs-expose-replayable-ai-tokens-that-can-bypass-mfa-a7397c","Cybercriminals are hijacking artificial intelligence (AI) user accounts via information stealer logs to create \"stolen keys\" that grant illicit access to tools from model providers like Google, Anthropic, and others. Information stealers like Lumma Stealer or Vidar are equipped to harvest a wide range of data from compromised systems. This can include credential, session tokens, and API","Cybercriminals are exploiting information stealer malware like Lumma Stealer and Vidar to harvest session tokens and API keys from AI user accounts. These stolen \"keys\" can be replayed to bypass credential-based authentication and MFA, granting attackers direct access to AI services from providers like Google and Anthropic. The stolen data also includes PII, which can be used for social engineering.","Infostealer logs are selling replayable AI tokens that bypass MFA and grant illicit account access.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F09\u002Finfostealer-logs-expose-replayable-ai.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEiYP_zrhRTZRWnPPcDkUrE7dBh2Bf5eaQmlBxyl7euTRGjS0C8boQppnrmjY0CIVjGrS_PF13V1W3BPVI3RDPZY59s_7xIkI8LnFkg3Tn_Q0x7_tbCs_sMkvhZMREtFLW3IOJSNNmQrKCDI88FCWhfymdWkEWtdMMRzivv3lZXImjreAz0d74VXt2K80ipH\u002Fs1600\u002Ftokens.jpg","2026-09-09T14:23:55+00:00","2026-09-09T16:00:20.541607+00:00",8,[17,20,23,25,27,29],{"name":18,"type":19},"Google Gemini","product",{"name":21,"type":22},"Google","vendor",{"name":24,"type":22},"Anthropic",{"name":26,"type":22},"OpenAI",{"name":28,"type":22},"Microsoft",{"name":30,"type":31},"NextAuth.js","technology","89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":32,"icon":34,"name":35,"slug":36},null,"Malware","malware",[38,43,48,50],{"category":39},{"id":40,"icon":34,"name":41,"slug":42},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":44},{"id":45,"icon":34,"name":46,"slug":47},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":49},{"id":32,"icon":34,"name":35,"slug":36},{"category":51},{"id":52,"icon":34,"name":53,"slug":54},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[56,59],{"type":36,"value":57,"context":58},"Lumma Stealer","Information stealer malware used to harvest AI tokens.",{"type":36,"value":60,"context":58},"Vidar",[21,28,24],{"controls":63,"vendors":150},[64,92,121],{"slug":65,"name":66,"problem":67,"products":68},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",[69,76,84],{"vendor_slug":70,"vendor_name":28,"vendor_logo":71,"product_slug":72,"product_name":73,"url":74,"description":75},"microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","entra-id","Microsoft Entra ID","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fidentity-access\u002Fmicrosoft-entra-id","Cloud identity and access management with single sign-on, conditional access, passkeys and identity governance.",{"vendor_slug":77,"vendor_name":78,"vendor_logo":79,"product_slug":80,"product_name":81,"url":82,"description":83},"yubico","Yubico","\u002Fvendor-logos\u002Fyubico.png","yubikey","YubiKey","https:\u002F\u002Fwww.yubico.com\u002Fproducts\u002F","Hardware security keys for FIDO2, passkeys and smart card login, in USB and NFC versions.",{"vendor_slug":85,"vendor_name":86,"vendor_logo":87,"product_slug":88,"product_name":89,"url":90,"description":91},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","duo","Cisco Duo","https:\u002F\u002Fduo.com\u002F","MFA and device trust, with support for passkeys and security keys.",{"slug":93,"name":94,"problem":95,"products":96},"secrets-management","Secrets management","API keys, tokens and passwords stop leaking from code, chat and configuration files.",[97,105,113],{"vendor_slug":98,"vendor_name":99,"vendor_logo":100,"product_slug":101,"product_name":102,"url":103,"description":104},"github","GitHub","\u002Fvendor-logos\u002Fgithub.png","advanced-security","GitHub Advanced Security","https:\u002F\u002Fgithub.com\u002Fsecurity\u002Fadvanced-security","Dependency review, code scanning and secret scanning with push protection.",{"vendor_slug":106,"vendor_name":107,"vendor_logo":108,"product_slug":109,"product_name":110,"url":111,"description":112},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",{"vendor_slug":114,"vendor_name":115,"vendor_logo":116,"product_slug":117,"product_name":118,"url":119,"description":120},"gitguardian","GitGuardian","\u002Fvendor-logos\u002Fgitguardian.png","gitguardian-platform","GitGuardian Secrets Detection","https:\u002F\u002Fwww.gitguardian.com\u002F","Finds and helps remediate secrets leaked in repositories, CI pipelines and chat tools.",{"slug":122,"name":123,"problem":124,"products":125},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[126,134,142],{"vendor_slug":127,"vendor_name":128,"vendor_logo":129,"product_slug":130,"product_name":131,"url":132,"description":133},"elastic","Elastic","\u002Fvendor-logos\u002Felastic.png","elastic-security","Elastic Security","https:\u002F\u002Fwww.elastic.co\u002Fsecurity","SIEM and endpoint security built on Elasticsearch, with open detection rules.",{"vendor_slug":135,"vendor_name":136,"vendor_logo":137,"product_slug":138,"product_name":139,"url":140,"description":141},"eset","ESET","\u002Fvendor-logos\u002Feset.png","eset-protect","ESET PROTECT","https:\u002F\u002Fwww.eset.com\u002Fint\u002Fbusiness\u002Fsolutions\u002Fendpoint-protection\u002F","Endpoint protection platform with detection and response add-ons.",{"vendor_slug":143,"vendor_name":144,"vendor_logo":145,"product_slug":146,"product_name":147,"url":148,"description":149},"sophos","Sophos","\u002Fvendor-logos\u002Fsophos.png","sophos-endpoint","Sophos Endpoint","https:\u002F\u002Fwww.sophos.com\u002Fen-us\u002Fproducts\u002Fendpoint-security","Endpoint protection with Intercept X anti-ransomware technology and EDR.",[151,156,158],{"slug":152,"name":21,"logo_path":153,"roles":154},"google","\u002Fvendor-logos\u002Fgoogle.png",[155],"affected",{"slug":70,"name":28,"logo_path":71,"roles":157},[155],{"slug":159,"name":160,"logo_path":161,"roles":162},"okta","Okta","\u002Fvendor-logos\u002Fokta.png",[163],"reported_by",{"slug":165,"title":166,"body":167,"framework_refs":168,"framework_notes":179},"stolen-ai-session-tokens-enable-mfa-bypass-via-infostealer-malware","Stolen AI Session Tokens Enable MFA Bypass via Infostealer Malware","Infostealer malware such as Lumma Stealer and Vidar is harvesting session tokens and API keys from compromised endpoints, allowing attackers to replay these credentials and bypass multi-factor authentication entirely. This highlights a critical flaw in relying solely on MFA: once a valid session token is stolen, the authentication challenge is already solved from the attacker's perspective. AI service providers and enterprise users are particularly at risk because long-lived tokens and API keys are often stored insecurely on disk or in browser profiles. The additional exposure of PII in these logs further amplifies the risk by enabling targeted social engineering attacks against users and organizations.",[169,170,171,172,173,174,175,176,177,178],"CIS Control 4: Secure Configuration of Enterprise Assets and Software","CIS Control 5: Account Management","CIS Control 13: Network Monitoring and Defense","NIST SP 800-63B Section 7.1 - Session Management","NIST AC-17: Remote Access","NIST SI-3: Malicious Code Protection","NIST IA-5: Authenticator Management","NIST SC-28: Protection of Information at Rest","GDPR Article 32: Security of Processing","OWASP Top 10 A07:2021 - Identification and Authentication Failures",{}]