Infostealer Logs Expose Replayable AI Tokens That Can Bypass MFA

Threat actors are leveraging info-stealers such as Lumma and Vidar to harvest session tokens and API keys belonging to AI platforms including Google and Anthropic. These stolen credentials allow attackers to gain unauthorized access to AI tools and bypass multi-factor authentication, posing severe security risks to enterprise environments integrating AI APIs.