Back Opentools.Ai

Microsoft Uncovers 'SesameOp' Backdoor: How OpenAI's API Was Ticket to Intrusion

Opentools.Ai • November 4, 2025

In a sophisticated cybersecurity breach, Microsoft's DART team has uncovered a novel backdoor, dubbed 'SesameOp', which cleverly uses OpenAI's API for stealthy command-and-control communications. Discovered during a comprehensive investigation, the malware illustrates an alarming trend where legitimate cloud services are abused to avoid detection.

Get the latest AI workflows to boost your productivity and business performance, delivered weekly by expert consultants. Enjoy step-by-step guides, weekly Q&A sessions, and full access to our AI workflow archive.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SesameOp Backdoor Exploits OpenAI API for Covert Cyber Operations Microsoft's Detection and Response Team (DART) discovered a new backdoor malware named SesameOp, which utilizes the OpenAI Assistants API for command-and-control (C2) communications. This malware allows attackers to maintain persistent access to compromised environments and manage devices covertly, marking a significant shift in cyber-espionage tactics by repurposing legitimate AI infrastructure. The backdoor was identified during an investigation into a cyberattack that began in July 2025. 14 sources 24

Extracted Entities

Microsoft Uncovers 'SesameOp' Backdoor: How OpenAI's API Was Ticket to Intrusion

The full story

Extracted Entities

Attack Types (1)

Malware (1)

Tools (1)