This threat involves widespread theft of AI platform credentials and session tokens from employees across more than 80,000 corporate domains, primarily targeting ChatGPT/OpenAI accounts. Infostealers capture live session cookies and credentials, enabling attackers to bypass authentication controls such as MFA and password changes. The stolen sessions grant access to conversation histories, execution capabilities, billing resources, and identity impersonation. Attackers can leverage stolen OAuth grants in automation platforms like Zapier to exfiltrate data or perform actions with employee authority. The stolen credentials are sold on underground markets, sometimes with money-back guarantees. The exposure affects diverse sectors including technology, healthcare, financial services, and energy. The report emphasizes that AI platforms must be treated as critical identity providers and protected accordingly.

The impact includes unauthorized access to AI accounts that serve as searchable archives of sensitive corporate data, execution engines for automation, billable resources, and employee identities. Attackers can replay stolen sessions to bypass MFA and password changes, access confidential conversation histories, and abuse API keys for financial gain or further compromise. Automation platforms linked to stolen credentials can be used to exfiltrate data or perform malicious workflows under the guise of legitimate employees. This exposure risks data breaches, intellectual property theft, financial fraud, and operational disruption across multiple industries.

Anthropic's approach to invalidating sessions, removing saved payment methods, and refunding unauthorized charges is a recommended remediation model. Organizations should enforce single sign-on (SSO) with OAuth 2.0/OIDC and refresh-token rotation to limit session lifetime. API keys should be scoped, capped, rotated regularly, and monitored for anomalous usage patterns such as access from unfamiliar networks or unusual times. Session tokens should be monitored for reuse or changes in device or geographic fingerprint to detect replay attacks. Treat any employee appearing in stealer logs as an endpoint security incident requiring investigation beyond password resets. Identify and manage shadow AI accounts to prevent unmanaged access. Use tools like SOCRadar’s AI Identity Exposure to detect domain exposure in stolen credential logs.