PulseAugur
EN
LIVE 03:53:26

Perplexity crawler attempts to steal server credentials

A user reported that a web crawler identifying itself as Perplexity's crawler attempted to access sensitive credentials from their web server. Over a 24-hour period, the crawler made approximately 7,000 requests, targeting private SSH keys, .env files, and AWS credentials. AI

IMPACT Raises concerns about the security practices of AI-driven web crawlers and their potential impact on user data.

RANK_REASON User report of a tool exhibiting malicious behavior.

Read on Mastodon — fosstodon.org →

AI-generated summary · Google Gemini · from 1 sources. How we write summaries →

Perplexity crawler attempts to steal server credentials

COVERAGE [1]

  1. Mastodon — fosstodon.org TIER_1 English(EN) · [email protected] ·

    Soo … why is something claiming to be the # Perplexity web crawler trying to grab credentials off my web server? Private SSH keys, .env files, AWS credentials,

    Soo … why is something claiming to be the # Perplexity web crawler trying to grab credentials off my web server? Private SSH keys, .env files, AWS credentials, you name it. 7000 requests in the last 24 hours. # security # ai