AIThe Hacker Newsabout 19 hours ago
Infostealer Logs Expose Replayable AI Tokens That Bypass MFA
1 min read
Okta analyzed a 7 GB infostealer dump containing 44,791 unique JWTs from 5,871 infected machines, finding 555 tokens linked to AI services like Google, Anthropic, and OpenAI. Attackers can replay these unexpired tokens to bypass multi-factor authentication and gain direct account access, a technique known as LLMjacking.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
