[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$feHkz_cJW1MsBzGXojC5xkRqDGttWvjrRPPloJ8ac_Ts":3},{"article":4,"iocs":59,"watch_terms":64,"solutions":65,"lesson":160},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":33,"category":34,"article_tags":38},"af984475-43f4-49eb-beb7-b2e76d42b8ce","Hackers use AntiFox AI agents in AWS credential-theft attacks","hackers-use-antifox-ai-agents-in-aws-credential-theft-attacks-f7bee1","Attackers are using Alibaba Cloud to host self-managed instances of AntiFox, an open-source agentic penetration testing platform, to target web services and AWS environments. [...]","Threat actors are hosting instances of AntiFox, an open-source AI agentic penetration testing platform, on Alibaba Cloud to target web services and AWS environments. The attackers exploit valid AWS identities and EC2 roles to conduct vulnerability scanning, deploy webshells, harvest secrets, and manipulate S3 objects. Arctic Wolf researchers documented multiple intrusions involving credential theft and configuration discovery, with recommendations for defenders to correlate IIS webshell activity with unusual AWS API access patterns.","Attackers abuse AntiFox AI pentesting tool on Alibaba Cloud to steal AWS credentials and deploy webshells","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fhackers-use-antifox-ai-agents-in-aws-credential-theft-attacks\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F10\u002F09\u002Frobot-hacker.jpg","2026-11-11T15:12:59+00:00","2026-11-11T16:00:20.715581+00:00",8,[17,20,22,24,27,30],{"name":18,"type":19},"AntiFox","product",{"name":21,"type":19},"ARTEX",{"name":23,"type":19},"AWS",{"name":25,"type":26},"Alibaba Cloud","technology",{"name":28,"type":29},"Vapor Panda","threat_actor",{"name":31,"type":32},"Arctic Wolf","vendor","89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":33,"icon":35,"name":36,"slug":37},null,"Malware","malware",[39,44,49,54],{"category":40},{"id":41,"icon":35,"name":42,"slug":43},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":45},{"id":46,"icon":35,"name":47,"slug":48},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":50},{"id":51,"icon":35,"name":52,"slug":53},"c70f3a41-2f0c-4608-870d-b8cbcd8be076","Cloud Security","cloud-security",{"category":55},{"id":56,"icon":35,"name":57,"slug":58},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[60,62],{"type":37,"value":18,"context":61},"Open-source agentic penetration testing platform forked from ARTEX 0.1.1, hosted on Alibaba Cloud for malicious AWS credential theft and vulnerability exploitation",{"type":37,"value":21,"context":63},"Agentic penetration-testing framework developed in China; parent project of AntiFox fork; linked to cyberespionage and South Korean bank attacks",[31,18,21],{"controls":66,"vendors":154},[67,96,125],{"slug":68,"name":69,"problem":70,"products":71},"privileged-access-management","Privileged access management (PAM)","Admin accounts stop being one stolen password away from control of everything.",[72,80,88],{"vendor_slug":73,"vendor_name":74,"vendor_logo":75,"product_slug":76,"product_name":77,"url":78,"description":79},"delinea","Delinea","\u002Fvendor-logos\u002Fdelinea.png","secret-server","Delinea Secret Server","https:\u002F\u002Fdelinea.com\u002Fproducts\u002Fsecret-server","Vault for privileged credentials with discovery, rotation and session recording.",{"vendor_slug":81,"vendor_name":82,"vendor_logo":83,"product_slug":84,"product_name":85,"url":86,"description":87},"wallix","WALLIX","\u002Fvendor-logos\u002Fwallix.png","wallix-pam","WALLIX PAM","https:\u002F\u002Fwww.wallix.com\u002Fproducts\u002Fprivileged-access-management-software\u002F","Privileged access management with session recording, for IT and OT environments.",{"vendor_slug":89,"vendor_name":90,"vendor_logo":91,"product_slug":92,"product_name":93,"url":94,"description":95},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","idira-privileged-access-management","Idira Privileged Access Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fhuman\u002Fprivileged-access-management","Privileged access management from the former CyberArk portfolio: vaulting, rotation, just-in-time access and session monitoring.",{"slug":97,"name":98,"problem":99,"products":100},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[101,109,117],{"vendor_slug":102,"vendor_name":103,"vendor_logo":104,"product_slug":105,"product_name":106,"url":107,"description":108},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","identity-threat-protection","Okta Identity Threat Protection","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fidentity-threat-protection\u002F","Continuous risk assessment of sessions after login, with automatic actions such as ending sessions.",{"vendor_slug":110,"vendor_name":111,"vendor_logo":112,"product_slug":113,"product_name":114,"url":115,"description":116},"acalvio","Acalvio","\u002Fvendor-logos\u002Facalvio.png","shadowplex-identity-protection","ShadowPlex Identity Protection","https:\u002F\u002Fwww.acalvio.com\u002Fproducts\u002Fidentity-protection\u002F","Decoy accounts and credentials that expose identity attacks and credential misuse early.",{"vendor_slug":118,"vendor_name":119,"vendor_logo":120,"product_slug":121,"product_name":122,"url":123,"description":124},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-itdr","Huntress Managed ITDR","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fmanaged-itdr","Managed detection of suspicious activity in Microsoft 365 and Entra ID.",{"slug":126,"name":127,"problem":128,"products":129},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[130,138,146],{"vendor_slug":131,"vendor_name":132,"vendor_logo":133,"product_slug":134,"product_name":135,"url":136,"description":137},"withsecure","WithSecure","\u002Fvendor-logos\u002Fwithsecure.png","elements-xdr","WithSecure Elements XDR","https:\u002F\u002Fwww.withsecure.com\u002Fen\u002Ffor-business\u002Fplatform\u002Fxdr\u002F","Endpoint detection and response with extended detection, on the Elements cloud platform.",{"vendor_slug":139,"vendor_name":140,"vendor_logo":141,"product_slug":142,"product_name":143,"url":144,"description":145},"sophos","Sophos","\u002Fvendor-logos\u002Fsophos.png","sophos-endpoint","Sophos Endpoint","https:\u002F\u002Fwww.sophos.com\u002Fen-us\u002Fproducts\u002Fendpoint-security","Endpoint protection with Intercept X anti-ransomware technology and EDR.",{"vendor_slug":147,"vendor_name":148,"vendor_logo":149,"product_slug":150,"product_name":151,"url":152,"description":153},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-endpoint","Microsoft Defender for Endpoint","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fendpoint-security\u002Fmicrosoft-defender-endpoint","Endpoint detection and response for Windows, macOS, Linux and mobile devices.",[155],{"slug":156,"name":31,"logo_path":157,"roles":158},"arctic-wolf","\u002Fvendor-logos\u002Farctic-wolf.png",[159],"reported_by",{"slug":161,"title":162,"body":163,"framework_refs":164,"framework_notes":170},"ai-powered-agents-exploiting-aws-credentials-via-webshells-and-ec2-roles","AI-Powered Agents Exploiting AWS Credentials via Webshells and EC2 Roles","Attackers are leveraging AntiFox, an open-source AI agentic penetration testing tool, hosted on Alibaba Cloud to systematically exploit valid AWS identities and EC2 instance roles — meaning stolen or abused legitimate credentials are doing the damage, not brute force. Once inside, the agents automate vulnerability scanning, webshell deployment, secret harvesting, and S3 manipulation, dramatically accelerating the attack lifecycle. The core failure is that legitimate AWS credentials and roles were either over-privileged or insufficiently monitored, allowing attackers to blend in with normal cloud activity. This matters because AI-driven attack agents can execute complex, multi-stage cloud intrusions far faster than defenders can manually detect them, making correlation of signals across web and cloud layers critical.",[165,166,167,168,169],"MITRE ATT&CK T1078: Valid Accounts","MITRE ATT&CK T1552: Unsecured Credentials","NIST SP 800-53 AC-6: Least Privilege","NIST CSF 2.0 DE.CM-01: Continuous Monitoring","CIS Control 6: Access Control Management",{"MITRE ATT&CK T1078: Valid Accounts":171,"NIST SP 800-53 AC-6: Least Privilege":172,"CIS Control 6: Access Control Management":173,"MITRE ATT&CK T1552: Unsecured Credentials":174,"NIST CSF 2.0 DE.CM-01: Continuous Monitoring":175},"The attackers abused valid AWS identities and EC2 roles to authenticate and operate within the environment, which is exactly what this technique describes — using legitimate credentials to avoid detection.","If EC2 instance roles had been scoped to only the permissions they legitimately needed, the attackers' ability to enumerate secrets, manipulate S3, and conduct configuration discovery would have been severely limited.","Proper management of AWS IAM identities and EC2 role permissions — including timely revocation and least-privilege assignment — would have restricted the blast radius once the attackers obtained valid credentials.","The campaign specifically targeted secrets harvesting from AWS environments, exploiting credentials stored or exposed in ways that allowed the AI agent to collect and reuse them.","Arctic Wolf's recommendation to correlate IIS webshell activity with unusual AWS API access directly reflects this control's requirement to continuously monitor information systems for anomalous events across different layers."]