Hackers use AntiFox AI agents in AWS credential-theft attacks

Summary

Attackers hosted self-managed instances of AntiFox, an open-source agentic penetration testing platform forked from ARTEX 0.1.1, on Alibaba Cloud to exploit web services and AWS environments. Arctic Wolf observed the infrastructure using valid AWS IAM users and assumed EC2 roles to make authenticated API calls, harvesting production secrets and reading, copying, and deleting S3 objects in some intrusions.

Mitigation

Arctic Wolf recommends correlating IIS webshell activity with unusual AWS access, reviewing successful API calls within bursts of denials, revoking affected AWS sessions and keys, and rotating credentials exposed through application files.

Topics

• AI agents

Related items

• MediumAntiFox AI Pentesting Platform Linked to Attacks That Accessed AWS Production SecretsSimilar attack · The Hacker News
• InfoThree People Arrested for AI-Enhanced Impersonation FraudSimilar attack · Schneier on Security
• InfoMicrosoft Researchers Show AI Agents Can Be Backdoored by Editing Fewer Than 10 NeuronsSimilar attack · The Hacker News
• HighCVE-2026-63651: LiveDocs is a primary-source-first documentation for AI agents. Prior to version 0.7.0, fetch_docs and introspect…Similar attack · NVD/CVE Database
• HighCVE-2026-125271 - AWS API MCP Server Security Policy Bypass via Incorrect Operation Name NormalizationSimilar attack · AWS Security Bulletins