{"id":10202,"date":"2026-10-29T11:52:51","date_gmt":"2026-10-29T11:52:51","guid":{"rendered":"https:\/\/cybersecurityinfocus.com\/?p=10202"},"modified":"2026-10-29T11:52:51","modified_gmt":"2026-10-29T11:52:51","slug":"imposter-abused-trust-in-openai-anthropic-and-30-others-to-hunt-for-secrets","status":"publish","type":"post","link":"https:\/\/cybersecurityinfocus.com\/?p=10202","title":{"rendered":"Imposter abused trust in OpenAI, Anthropic, and 30 others to hunt for secrets"},"content":{"rendered":"
\n
\n
\n
\n
<\/div>\n

Attackers are impersonating AI agents from companies including OpenAI, Anthropic, and Meta in a bid to trick organizations into exposing sensitive credentials, according to researchers who observed a single threat actor cycling through dozens of fake bot identities while probing enterprise web servers for secrets.<\/p>\n

A single threat actor was seen posing as approximately 32 AI bots, while probing organizations across multiple industries. Sought files included those used to store passwords, API keys, and cloud credentials.<\/p>\n

A malicious scanner used by the attacker ran from an unnamed major cloud provider. \u201cIt ignores web pages and requests files that commonly store secrets, including .env configuration files, cloud credential files, private SSH keys, and server environment data, working from a list of roughly 90 file paths,\u201d Cequence\u2019s director of threat research, Will Glazier, said in a blog post<\/a>.<\/p>\n

Collin Hogue-Spears<\/a>, senior director of solution management at Black Duck, who reviewed Cequence\u2019s findings, points out that the scanner tested whether websites treated an AI bot\u2019s self-declared name as proof of its identity. \u201cThe user-agent header is where a visitor names itself, and setting it costs nothing,\u201d he said.<\/p>\n

Glazier said defending against such impersonation requires verifying every claimed identity before trusting it.<\/p>\n

While Cequence confirmed observing extensive scanning activity attributed to a single threat actor, it did not report a breach. \u201cOn one day in October, the actor reached 48% of the Cequence-protected organizations that saw any AI bot traffic,\u201d the company said.<\/p>\n

<\/a>A rotating cast of AI identities hunts for secrets<\/h2>\n

According to Glazier, the scanner cycled through roughly 32 AI bot identities and targeted organizations in financial services, retail, telecommunications, energy, and software. The activity was observed from at least late September through late October 2026.<\/p>\n

Instead of crawling publicly accessible pages, the scanner requested sensitive paths associated with configuration and credential files. Working through a list of approximately 90 file paths, it sent bursts of 50 to 190 requests in about eight seconds before moving on, Cequence said.<\/p>\n

The same bot machine was observed claiming to represent OpenAI<\/a>, Anthropic, Meta, and Perplexity within seconds. It also used more than 300 cloud addresses in a single day, making static IP blocklists less effective as a standalone defense.<\/p>\n

\u201cFraud is now polymorphic: AI lets attackers vary their approach every time, so legacy, static fraud defenses decay faster than teams can update them,\u201d warned Patrick Harr<\/a>, chief executive officer at DataVisor. However, institutions that make real-time decisioning the foundation, with detection that adapts as quickly as the threats do, can use AI to defend as effectively as attackers do, he noted.<\/p>\n

Nearly all the scanner\u2019s requests were blocked or failed, Cequence noted.<\/p>\n

<\/a>Don\u2019t trust the agent\u2019s name, verify it<\/h2>\n

Cequence recommends verifying AI crawlers through published address ranges, signed requests, or direct integrations rather than relying on self reported identities. Security teams should also flag bots that request credential files, keep secrets<\/a> out of web-accessible directories, and assess automated traffic based on its behavior.<\/p>\n

Shane Barney<\/a>, chief information security officer at Keeper Security, said organizations must extend zero-trust controls and least-privilege policies to AI agents, API keys, and service accounts. He also urged businesses to replace long-lived local credentials with centrally managed secrets.<\/p>\n

\u201cWhen an identity starts looking for sensitive files it shouldn\u2019t need, real-time threat detection must flag and terminate that machine session instantly,\u201d Barney added.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>","protected":false},"excerpt":{"rendered":"

Attackers are impersonating AI agents from companies including OpenAI, Anthropic, and Meta in a bid to trick organizations into exposing sensitive credentials, according to researchers who observed a single threat actor cycling through dozens of fake bot identities while probing enterprise web servers for secrets. A single threat actor was seen posing as approximately 32 […]<\/p>\n","protected":false},"author":0,"featured_media":10203,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[],"class_list":["post-10202","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-education"],"_links":{"self":[{"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=\/wp\/v2\/posts\/10202"}],"collection":[{"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=10202"}],"version-history":[{"count":0,"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=\/wp\/v2\/posts\/10202\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=\/wp\/v2\/media\/10203"}],"wp:attachment":[{"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=10202"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=10202"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=10202"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}