Hackers Pose as OpenAI, Anthropic and DeepSeek to Steal Credentials and Secrets

Threat actors are impersonating web crawlers from OpenAI, Anthropic, DeepSeek, and other major organizations to scan websites for exposed credentials and sensitive configuration files, targeting misconfigured servers that may leak cloud keys, API tokens, passwords, and private keys. GreyNoise observed a broader cluster using 13 AI crawler...