SesameOp Backdoor Abused OpenAI Assistants API for Remote Access

Back Feeds.Feedburner

SesameOp Backdoor Abused OpenAI Assistants API for Remote Access

Feeds.Feedburner •Waqas • November 4, 2025

Share: View original

Microsoft researchers found the SesameOp backdoor using OpenAI’s Assistants API for remote access, data theft, and command communication.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SesameOp Backdoor Exploits OpenAI API for Remote Access and Command Control Microsoft researchers discovered the SesameOp backdoor, which utilizes OpenAI’s Assistants API for remote access and data theft. The malware employs the API to store and relay commands from its command and control (C&C) server, enabling unauthorized control over affected systems. 2 sources 36

Extracted Entities

Attack Types (2)

Data Breach Malware

Malware (1)

Tools (1)

OpenAI Assistants API