AntiFox AI agents hijacked by hackers to carry out theft of AWS credentials
- Attackers are abusing the AI-powered penetration testing tool AntiFox to search for credentials and compromise AWS environments
- Campaigns leveraged web-server intrusions and stolen cloud credentials to map infrastructure and access sensitive resources
- Researchers urge organizations to monitor for web shells, rotate exposed secrets, and enforce least-privilege access controls
Cybercriminals are using an open source AI-powered pentesting platform called AntiFox to steal login credentials and access people’s Amazon Web Services (AWS) environments.
This is according to security researchers Arctic Wolf, who recently disclosed their findings on GitHub, explaining how unnamed threat actors were hosting their own instances of the tool on Alibaba Cloud infrastructure and were using its automated capabilities to analyze compromised systems, search for passwords, and access cloud resources.
What is AntiFox?
AntiFox is an AI-powered, open source penetration testing platform built by a Chinese developer. Penetration testing is a process cybersecurity professionals usually use to identify weaknesses in...
Copyright of this story solely belongs to www.techradar.com. To see the full text click HERE
