Malware

Aokigahara

Tracked since Oct 15, 2026 · Updated 2 days ago

Trending this week#17of 29,109 malware families

Mention activity · 30 days

21 mentions · peak 7 in a dayToday

Vulns0Associated

Actors0Associated

ATT&CK0Techniques

IOCs180Tracked

Type: Infostealer
Capabilities: Credential theftSession hijackingExfiltrationDefense evasionReconnaissanceCrypto theft
Platforms: Windows

Aokigahara is a modular Windows information stealer observed in the wild that targets browser credentials, session cookies, cryptocurrency wallet data, and locally stored application secrets. It captures screenshots and clipboard contents, collects selected user files, queries Windows Credential Manager, and gathers system information, including running processes, installed software, and security products. Its collection targets include messaging clients, email applications, password managers, VPN clients, file-transfer tools, and gaming applications. It also drops a separate clipboard-manipulation component.

A distinctive AI-session collection module targets authentication files, session data, and configuration associated with Claude Code and Desktop, ChatGPT Desktop, Codex, Cursor, Windsurf, GitHub Copilot, Gemini CLI, JetBrains AI Assistant, Amazon Q, and Kiro. A separate developer-focused module collects Git credentials, SSH-related files that may contain private keys, and AWS, Microsoft Azure, and Google Cloud credential and configuration data. Not every collected file necessarily contains authentication secrets. Valid stolen credentials and reusable sessions can expose AI accounts, private repositories, and cloud resources; these capabilities involve theft from compromised endpoints rather than exploitation of vulnerabilities in the targeted services.

Aokigahara uses configurable debugger, virtual-machine, and sandbox checks, including hardware and process inspection and cursor-movement checks. It can terminate execution based on configured keyboard or Windows interface language exclusions. Additional evasion measures include hashed Windows API resolution, control-flow flattening, and AES-256-CBC-encrypted configuration. Collection modules are enabled through configuration flags. Stolen information is packaged into ZIP archives and uploaded using AES-256-GCM encryption with keys derived through X25519 key exchange. Its initial delivery mechanism, threat-actor attribution, and operators' monetization practices are not established.

Is this in your environment?See whether this family's indicators match your telemetry and which of your assets are exposed to the CVEs associated with it.

Check your exposure

Indicators of compromise

Observables

180 indicators attributed across vendor reports, sandbox runs, and researcher write-ups. Values are masked here and available in full in Mallory.

View all in app →

Indicator values are available in Mallory. Pivot on every hash, domain, URL, and IP, or pipe them straight into your SIEM.View all in Mallory

Activity feed

Recent activity

21 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.

View more in app →

the hacker newsNews · Oct 29, 2026ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More StoriesA macOS information stealer targeting browsers, VPN clients, cryptocurrency wallets, FTP/SFTP clients, password managers, email applications, AI applications, and development tools. It collects authentication material, sessions, and configuration files, potentially enabling unauthorized use or resale of paid AI accounts.Read more ↗govinfosecurityNews · Oct 29, 2026Breach Roundup: Apparently Chinese Hackers Deploy PHP2ShellWindows information stealer targeting browsers, VPN clients, cryptocurrency wallets, password managers, email applications, AI applications and developer tools. It collects authentication tokens, session data, API keys, Git credentials, SSH private keys and cloud configuration files. Stolen credentials could expose AI conversation histories, proprietary code, private repositories and cloud environments. It detects virtual machines and sandboxes, then compresses and encrypts stolen data before exfiltration.Read more ↗bank info securityNews · Oct 29, 2026Breach Roundup: Apparently Chinese Hackers Deploy PHP2ShellWindows information stealer targeting browsers, VPN clients, cryptocurrency wallets, password managers, email applications, AI applications and developer tools. It collects authentication tokens, session data, API keys, Git credentials, SSH private keys and cloud configuration files. It detects virtual machines and sandboxes, then compresses and encrypts stolen data before exfiltration to attacker-controlled servers.Read more ↗intrinsec blogNews · Oct 27, 2026Les infostealers prennent l'IA en ligne de mire - INTRINSECInformation stealer with an aisessions module that collects authentication and configuration files from AI applications and coding assistants. It also steals AWS, Azure and Google Cloud credentials, SSH keys and Git access credentials.Read more ↗

+6 more in the timeline. Sign up to see them

Is this in your environment?See whether this family's indicators match your telemetry and which of your assets are exposed to the CVEs associated with it.

Check your exposure

Mallory platform

The version that knows your environment.

This page is what’s public. Mallory adds the parts that aren’t: which of your assets match these IOCs, which detections are missing, which campaigns to expect next, and what to do in the next 30 minutes.

Start Free Trial Open in App ↗

IOC matching180Match every observed IP, domain, and hash against your live telemetry.

Associated threat actorsGroups linked to this family, with evidence pinned to each claim.

Associated vulnerabilitiesCVEs linked to this family, with the reporting behind each link.

Detection signaturesYARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.

MITRE ATT&CK mappingEvery documented technique, ranked by evidence weight.

Researcher chatterReddit, Mastodon, and CTI community discussion around this family.

Malware

Aokigahara

Tracked since Oct 15, 2026 · Updated 2 days ago

Trending this week#17of 29,109 malware families

Mention activity · 30 days

21 mentions · peak 7 in a dayToday

Vulns0Associated

Actors0Associated

ATT&CK0Techniques

IOCs180Tracked

Type: Infostealer
Capabilities: Credential theftSession hijackingExfiltrationDefense evasionReconnaissanceCrypto theft
Platforms: Windows

Is this in your environment?See whether this family's indicators match your telemetry and which of your assets are exposed to the CVEs associated with it.

Check your exposure

Indicators of compromise

Observables

180 indicators attributed across vendor reports, sandbox runs, and researcher write-ups. Values are masked here and available in full in Mallory.

View all in app →

Indicator values are available in Mallory. Pivot on every hash, domain, URL, and IP, or pipe them straight into your SIEM.View all in Mallory

Activity feed

Recent activity

21 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.

View more in app →

+6 more in the timeline. Sign up to see them

Is this in your environment?See whether this family's indicators match your telemetry and which of your assets are exposed to the CVEs associated with it.

Check your exposure

Mallory platform

The version that knows your environment.

Start Free Trial Open in App ↗

IOC matching180Match every observed IP, domain, and hash against your live telemetry.

Associated threat actorsGroups linked to this family, with evidence pinned to each claim.

Associated vulnerabilitiesCVEs linked to this family, with the reporting behind each link.

Detection signaturesYARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.

MITRE ATT&CK mappingEvery documented technique, ranked by evidence weight.

Researcher chatterReddit, Mastodon, and CTI community discussion around this family.