Attacker Relentlessly Scans for Credentials by Impersonating AI Bots

A scanner has impersonated 32 AI bots from OpenAI, Anthropic, Perplexity, Meta, and other providers since late September. It sends bursts of 50–190 requests, probes about 90 paths, and seeks passwords, API keys, cloud credentials, configuration files, and private SSH keys. On one October day, 48% of Cequence-protected organizations received the traffic. Most requests were blocked or failed.