Attacker Relentlessly Scans for Credentials by Impersonating AI Bots

A threat actor is disguising themselves as AI bots from various companies to scan for exposed credentials. The impersonated companies include OpenAI, Anthropic, and Meta, among others. This tactic allows the attacker to lurk behind the fake bots and search for vulnerable data. The goal of the scans is to find and potentially exploit exposed credentials. The threat actor's use of AI bot disguises is a notable aspect of their approach.