Threat actors are impersonating web crawlers from OpenAI, Anthropic, DeepSeek, and other major organizations to scan websites for exposed credentials and sensitive configuration files, targeting misconfigured servers that may leak cloud keys, API tokens, passwords, and private keys. GreyNoise observed a broader cluster using 13 AI crawler identities from eight companies. The scanners requested files […]
The post Hackers Pose as OpenAI, Anthropic and DeepSeek to Steal Credentials and Secrets appeared first on Cyber Security News.