aiqbench takeAI Safety

The rapid theft of employee AI credentials via infostealer malware highlights a critical security gap where unapproved personal use creates blind spots for corporate data protection. This incident underscores that the primary risk stems not from platform vulnerabilities but from the lack of visibility over shadow IT deployments, allowing attackers to hijack paid resources and access sensitive chat histories without additional authentication. Organizations must enforce strict governance on AI tool adoption to prevent credential leakage that enables sophisticated phishing and ransomware campaigns.

Source coveringProton Blog

What this isA model's reading of the article and related coverage, written for aiqbench. Not the publisher's words.

Cybercriminals have stolen AI logins from 80,000 organizations

Proton BlogOctober 5, 20266 min read

A new report indicates that criminals are stealing AI logins at a rapid rate: Find out why and how to protect your business

When your employees use AI tools you haven’t approved, they create accounts you can’t see, secure, or shut down, each with a chat history full of your business data. New research published by SOCRadar(new window) found that more than 80,000 organizations globally have had their employee AI logins appear in infostealer logs. Infostealers are a type of malware that collect passwords, session cookies, financial and personal, and chat logs from infected devices and send them back to the attacker. That data makes phishing or ransomware attacks far more effective. According to the research, the logs were captured by a well-known piece of infostealer malware that’s been on sale on Telegram…

Excerpt shown under the publisher's RSS terms · 110 words · full text and figures are on the publisher's site

Read at Proton Blog ↗Ask about this article