Threat actors are impersonating web crawlers associated with OpenAI, Anthropic, DeepSeek, Google, Amazon, and other major brands to probe websites for exposed credentials, cloud keys, and private configuration files. GreyNoise researchers observed the automated scanning activity between late July and late August 2026. The campaign used forged crawler user-agent strings while requesting sensitive paths commonly […]
The post Fake OpenAI and Anthropic Crawlers Scan Websites for Cloud Keys and Passwords appeared first on Cyber Security News.