Attackers exploit AntiFox AI platform to steal AWS credentials

First reported by BleepingComputer at · Updated · 4 sources

Attackers are using Alibaba Cloud systems to host AntiFox, an open-source agentic penetration testing platform, in attacks targeting web services and AWS environments. According to The Hacker News, the campaign also involved moving laterally within compromised environments after credentials were stolen, extending the intrusions beyond their initial access.

  • According to Security Affairs, Arctic Wolf observed attacks targeting IIS servers and AWS accounts.

Covered by 4 publishers within 20 hours of the first report.

Reporting4

BleepingComputer Hackers use AntiFox AI agents in AWS credential-theft attacks · Bill Toulas
The Hacker News AntiFox AI Pentesting Platform Linked to Attacks That Accessed AWS Production Secrets · info@thehackernews.com (The Hacker News)
Security Affairs AI Pentest Tool AntiFox Abused To Steal AWS Credentials · Pierluigi Paganini
Cyber Security News Hackers Abuse AntiFox AI Pentesting Tool to Deploy Webshells and Access AWS Production Secrets · Tushar Subhra Dutta

Related

Attackers use Qubole AWS credentials to steal customer data
AWS releases UAEF to evaluate AI agents across frameworks
AWS grows 39% and Amazon will spend even more on AI in 2027
AWS commits $100M in AI and cloud credits to expand health services

Topics Amazon