Two Windows malware families steal login tokens from AI tools, and those tokens can keep working after a password reset. Here is what to do and who should worry.
Changing your password may not be enough after an AI account is hacked. Two Windows malware families, WardenStealer and Aoki, steal the digital keys that keep you signed in to tools like ChatGPT, Claude and Codex. Those keys can keep working after a password reset. Thieves are already selling access to them.
Security firm SpyCloud studied logs recovered from infected computers. In an October 30 report, it said it had counted more than 130,000 unique WardenStealer infections since first seeing the malware on August 3, 2026. Malware like this is called an infostealer. It quietly copies sensitive files from a computer and sends them to criminals.
The stolen items go beyond passwords. They include access tokens, which approve requests. Refresh tokens can get new access tokens. API keys let software use paid services. A valid session also lets a thief act as you without a fresh login or a new multifactor check. Aoki was seen collecting data tied to ChatGPT, Claude Code, Claude Desktop, Codex, GitHub Copilot and Cursor.
The stolen material has buyers. SpyCloud saw offers of $100 in claimed Codex or Claude API credit for $8.94. Researchers could not confirm that every offer came from malware, since phishing, exposed secrets or fraudulent signups could also be sources.
Criminals use such access for LLMjacking, which means running AI services on someone else's account. The victim can be left with unexpected charges. For developers, the risk is wider. AI assistants are often linked to code storage, cloud services and build systems. Stolen settings can show attackers which systems a developer uses.
The malware targets Windows. If you do not use these AI tools on a Windows computer, this particular threat is less likely to touch you. Whether a stolen token still works depends on the provider, the token type and the account controls, so the risk varies.
The alert box above lists the steps. The key idea is to cancel what was already issued, not just change a password. Businesses should treat AI credentials as part of any investigation of an infected developer computer.
The malware spreads through ClickFix lures, malicious ads, cracked software and fake game cheats. Unfamiliar charges or usage on an AI account are a warning sign.
After a possible infection, sign out everywhere and replace keys and tokens, because a new password alone may not shut a thief out.
A user says Anthropic's Claude Code put his email in web requests, then scam messages arrived. The link is unproven, but it shows what AI tools can share.
Read more: User says Claude Code sent his email address to websitesEA has re-released 25 classic PC games at a discount until November 19, and Bethesda has finally given The Elder Scrolls VI a subtitle: Sentinel.
Read more: EA brings 25 classic PC games back, and Elder Scrolls VI gets a nameThe Attala County Sheriff's Office in Mississippi says scam calls are reaching residents, and a call that sounds official may not be.
Read more: Mississippi sheriff warns residents about scam phone calls
