SesameOp Malware Abuses OpenAI API

Back Feeds.Feedburner

SesameOp Malware Abuses OpenAI API

Feeds.Feedburner •Ionut Arghire • November 4, 2025

Share: View original

A component of the newly discovered SesameOp backdoor uses the API to store and relay commands from the C&C server.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SesameOp Backdoor Exploits OpenAI API for Remote Access and Command Control Microsoft researchers discovered the SesameOp backdoor, which utilizes OpenAI’s Assistants API for remote access and data theft. The malware employs the API to store and relay commands from its command and control (C&C) server, enabling unauthorized control over affected systems. 2 sources 36

Extracted Entities

Attack Types (1)

Malware (1)

Tools (1)