Symantec uncovers autonomous AI attack agent hijacking exposed LLM endpoints (LLMjacking) to scan, exploit, steal credentials and mine Monero
Symantec's Threat Hunter Team used an AI honeypot to capture the full instruction set of a malicious autonomous AI agent in summer 2026. The agent is designed to run up to 100,000 malicious actions without human approval: scanning for targets, exploiting vulnerabilities, stealing credentials, deploying cryptocurrency miners and reinfectin…