Skip to content
SesameOp Backdoor Exploits OpenAI API for Command and Data Theft

SesameOp Backdoor Exploits OpenAI API for Command and Data Theft

First seen 2 Dec 2025, 18:33 UTC

Article Content

Browse articles
ThreatCluster AI
ThreatCluster March 12, 2026 at 13:27 UTC

Microsoft researchers identified the SesameOp backdoor, which utilizes OpenAI’s Assistants API for remote access and data theft. This malware component is designed to store and relay commands from a command and control server, posing significant risks to affected systems.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 182d ago How this analysis works

More articles in this cluster (2)

Following this threat?

Track Sesameop in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed