IncidentsAttacker Poses as AI Crawlers to Hunt for Exposed Credentials
A threat actor disguised internet-wide scanning as traffic from OpenAI, Anthropic and Meta bots, Dark Reading reported on 28 October 2026.
28 Oct 2026
Threat Actor Impersonates AI Bots to Scan for Exposed Credentials
A threat actor used fake user-agent strings mimicking AI crawlers from OpenAI, Anthropic, Meta, and others to scan the internet for exposed credentials and data, likely to evade detection filters.
Disclosed 28 October 2026 · Record updated 28 October 2026
Impact
Widespread scanning activity targeting exposed credentials by impersonating legitimate AI crawler bots, potentially evading security controls that allowlist known AI bot traffic.
Our coverage
IncidentsSources
- darkreading.comhttps://darkreading.com/cyber-risk/attacker-impersonates-ai-bots-scans-credentials