AntiFox AI agents hijacked by hackers to carry out theft of AWS credentials

(Image credit: Getty Images)

Attackers are abusing the AI-powered penetration testing tool AntiFox to search for credentials and compromise AWS environments

Campaigns leveraged web-server intrusions and stolen cloud credentials to map infrastructure and access sensitive resources

Researchers urge organizations to monitor for web shells, rotate exposed secrets, and enforce least-privilege access controls

Cybercriminals are using an open source AI-powered pentesting platform called AntiFox to steal login credentials and access people’s Amazon Web Services (AWS) environments.