ATTACKER IMPERSONATES AI BOTS TO SCAN ORGS FOR KEYS, CREDENTIALS

Summary from the TLDR InfoSec newsletter

A scanner has impersonated 32 AI bots from OpenAI, Anthropic, Perplexity, Meta, and other providers since late September. It sends bursts of 50–190 requests, probes about 90 paths, and seeks passwords, API keys, cloud credentials, configuration files, and private SSH keys. On one October day, 48% of Cequence-protected organizations received the traffic. Most requests were blocked or failed.