Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
20 IOCs
Aoki: Infostealer Targets AI Coding Assistant Credentials
Threat Actors
Malware Families
Excerpt
Aoki: Infostealer Targets AI Coding Assistant Credentials | SECURITY.COM Skip to main content Threat Intelligence Feature Stories Expert Perspectives Tech Insights Threat Updates Podcasts Events Broadcom Home Aoki: Infostealer Targets AI Coding Assistant Credentials Newer versions of a little-documented infostealer steal API keys and tokens from ever-growing number of AI coding assistants, including Claude, Codex, Cursor and Gemini. Threat Intelligence 15 Oct 2026 6 Min Read…
Read the original report →Diamond Model
Adversary(6)
Infrastructure(3)
Capability(9)
Victim
Indicators of Compromise
Open the mindmap →20 indicators
IOC Relationship Graph
Building graph…