{
 "id": "AIR-2025-0066",
 "slug": "aikatz-extracts-authentication-tokens-from-llm-desktop-apps",
 "title": "AIKatz Extracts Authentication Tokens from LLM Desktop Apps",
 "summary": "Researchers demonstrated that authentication tokens can be extracted from LLM desktop application memory to impersonate victims and manipulate AI conversations. The attack allows prompt injection, context poisoning, and conversation history tampering.",
 "type": "attack_on_ai",
 "categories": [
  "data_leak",
  "agent_hijack",
  "prompt_injection"
 ],
 "severity": 1,
 "targets": [
  "enterprise_deployment"
 ],
 "products": [
  "LLM Desktop Applications"
 ],
 "incident_date": "2025",
 "incident_date_precision": "year",
 "first_reported": "2025-11-07",
 "sources": [
  {
   "url": "https://atlas.mitre.org/studies/AML.CS0036",
   "publisher": "MITRE ATLAS",
   "title": "AIKatz: Attacking LLM Desktop Applications",
   "published_at": "2025-11-07"
  },
  {
   "url": "https://lumia.security/blog/aikatz",
   "publisher": "lumia.security",
   "title": "AIKatz - All Your Chats Are Belong To Us",
   "published_at": "2025-11-07"
  }
 ],
 "source_count": 2,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_atlas",
 "tags": [
  "aikatz",
  "token-extraction",
  "credential-theft"
 ],
 "created_at": "2026-10-18T06:55:08.239Z",
 "updated_at": "2026-10-18T06:55:08.239Z"
}