Microsoft Detects "SesameOp" Backdoor Using OpenAI's API as a Stealth Command Channel

Back Thehackernews

Microsoft Detects "SesameOp" Backdoor Using OpenAI's API as a Stealth Command Channel

Thehackernews •[email protected] (The Hacker News) • November 4, 2025

Share: View original

Static defenses overwhelm teams with vuln lists. Learn how automation and context-driven reduction close real risks faster.

The future of GRC isn't coming—it's already here, powered by AI that learns, adapts, and audits itself.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SesameOp Backdoor Exploits OpenAI API for Covert Cyber Operations Microsoft's Detection and Response Team (DART) discovered a new backdoor malware named SesameOp, which utilizes the OpenAI Assistants API for command-and-control (C2) communications. This malware allows attackers to maintain persistent access to compromised environments and manage devices covertly, marking a significant shift in cyber-espionage tactics by repurposing legitimate AI infrastructure. The backdoor was identified during an investigation into a cyberattack that began in July 2025. 14 sources 24

Extracted Entities

Attack Types (1)

Malware (1)

Tools (1)