A security research report from SOCRadar found infostealer malware logs containing AI service account credentials and sessions tied to more than 80,000 corporate domains, exposing organizations to risks including stolen conversations and LLMjacking.
Disclosed 28 September 2026 · Record updated 1 October 2026
Stolen credentials and session tokens for AI accounts belonging to over 80,000 corporate domains were found circulating via infostealer malware logs, exposing organizations to risks such as leaked conversations and unauthorized use of AI accounts (LLMjacking).
IncidentsA SOCRadar report published on 28 September 2026 says infostealer logs contain AI account credentials and session data tied to more than 80,000 corporate domains.
28 Sept 2026
