Infostealer Logs Expose Replayable AI Tokens That Can Bypass MFA
Valid session tokens, JSON Web Tokens (JWTs), encrypted JWTs (JWEs), and API keys stolen through infostealer logs can enable unauthorized access to artificial intelligence and large language model services while bypassing normal username, password, and multi-factor authentication checks.
CERT24