Attackers abuse AntiFox AI pentest platform to steal AWS production secrets and drop ASPX webshells on IIS servers
Matéria consolidada. Reúne 3 matérias que o Tifon tinha publicado separadamente sobre a mesma história. A IA reescreveu o relatório com o que as 3 fontes trouxeram em 12/11/2026 00:00; os links antigos trazem para cá.
Fontes: securityaffairs.com ↗ bleepingcomputer.com ↗ thehackernews.com ↗
Arctic Wolf Labs reported a campaign in which threat actors abuse AntiFox, an open-source, Chinese-language, agentic AI penetration testing platform, to automate attacks on internet-facing IIS web servers and AWS environments (bleepingcomputer.com, thehackernews.com, securityaffairs.com). The attackers deployed ASPX webshells on IIS servers, collected configuration files and AWS secrets, and used valid IAM credentials and EC2 roles to enumerate AWS services. Most AWS API requests were denied, but some succeeded, yielding production secrets and allowing manipulation of S3 objects (bleepingcomputer.com, securityaffairs.com). The reporting, all published on 2026-11-11, treats the campaign as an example of agentic AI tooling speeding up and scaling intrusions (thehackernews.com). No named threat actor is attributed to this campaign, and the sources do not give victim counts or affected sectors.
Detalhes técnicos
- Tooling: AntiFox is described as a fork of ARTEX, which has been linked to Chinese cyber espionage campaigns targeting organizations globally (bleepingcomputer.com). The attackers used self-managed AntiFox instances hosted on Alibaba Cloud (bleepingcomputer.com). The publisher prohibits illegal use, but there are no technical controls to prevent abuse (bleepingcomputer.com). The tool automates complex pentest workflows, giving faster and more consistent exploitation with less manual effort (securityaffairs.com).
- IIS side: After initial access, the attackers deployed ASPX webshells, executed OS commands, and used PowerShell to collect sensitive configuration files and escalate access (bleepingcomputer.com, securityaffairs.com, thehackernews.com).
- AWS side: The attackers made authenticated API requests with valid IAM credentials and EC2 roles. They enumerated multiple services, attempted to retrieve secrets, listed and manipulated S3 buckets, and ran rapid, automated discovery (securityaffairs.com, thehackernews.com). Thehackernews.com also describes lateral movement.
- Outcome: Some attempts were blocked, but several succeeded in obtaining production secrets and manipulating S3 objects (bleepingcomputer.com).
Remediação
- Correlate IIS webshell activity with unusual AWS API usage, and rotate any exposed AWS credentials (bleepingcomputer.com).
- Monitor AWS activity for unusual multi-user requests and suspicious secret access (securityaffairs.com).
- Watch for new .aspx files in IIS upload locations and unexpected PowerShell usage (securityaffairs.com).
- Enable AWS CloudTrail logging, and use S3 versioning and Object Lock (securityaffairs.com).
- Patch internet-facing applications, isolate compromised servers, and enforce least-privilege AWS permissions (securityaffairs.com).
Relatos divergentes
- Initial access: Thehackernews.com says the actors exploited vulnerabilities to deploy the webshells. Securityaffairs.com is more precise: access came through unknown vulnerabilities in public IIS applications or through valid AWS credentials obtained by undisclosed means. No specific CVE is named in any source, and how the credentials were obtained is unconfirmed.
- Attribution: Bleepingcomputer.com links AntiFox's parent project, ARTEX, to Chinese espionage. None of the sources attributes this campaign itself to a named actor or to China, so any link to that espionage activity is unconfirmed.
- Success rate: Securityaffairs.com stresses that most AWS API requests were denied, while bleepingcomputer.com emphasizes that several attempts succeeded. The two are compatible, but the exact proportion is not given.
Linha do tempo
-
Attackers Abuse AI Pentest Tool AntiFox to Steal AWS Credentials and Compromise IIS Servers
ler a análise desta fonte ocultar
Threat actors have been observed abusing AntiFox, an open-source Chinese-language agentic penetration testing platform, to automate attacks against internet-facing IIS web servers and AWS environments. Arctic Wolf Labs reports that attackers exploited either unknown vulnerabilities in public IIS applications or valid AWS credentials (obtained through undisclosed means) to gain access. On IIS servers, attackers deployed ASPX web shells and used PowerShell to collect sensitive configuration files and escalate access. In AWS environments, they leveraged legitimate IAM credentials and EC2 roles to enumerate multiple services, attempt to retrieve secrets, list and manipulate S3 buckets, and perform rapid, automated discovery. Most AWS API requests were denied; however, successful accesses allowed the extraction of production secrets and data. Arctic Wolf emphasizes that AntiFox enables faster, consistent exploitation by automating complex pentest workflows, reducing manual effort and increasing attack effectiveness. Defenders are advised to monitor AWS activity for unusual multi-user requests, new .aspx files in IIS uploads, unexpected PowerShell usage, and suspicious secret access. They should also enable AWS CloudTrail logging, use S3 versioning and Object Lock, patch internet-facing applications, isolate compromised servers, and enforce least-privilege AWS permissions.
-
Attackers abuse AntiFox AI platform on Alibaba Cloud for AWS credential theft and webshell attacks
ler a análise desta fonte ocultar
Security researchers at Arctic Wolf discovered that threat actors are abusing self-managed instances of AntiFox, an open-source AI-driven penetration testing tool hosted on Alibaba Cloud, to conduct malicious activities against AWS environments and web services. The attackers leveraged valid AWS IAM credentials and EC2 roles to make authenticated API requests, steal AWS secrets, deploy ASPX webshells on exposed IIS servers, execute OS commands, and access sensitive configuration files. Some attack attempts were blocked, but several succeeded in obtaining production secrets and manipulating S3 objects. Arctic Wolf recommends correlating IIS webshell activity with unusual AWS API usage and rotating exposed AWS credentials. AntiFox is a fork of ARTEX, which has been linked to Chinese cyber espionage campaigns targeting multiple organizations globally. Although AntiFox's publisher prohibits illegal uses, there are no technical controls to prevent abuse, meaning it remains a viable tool for attackers.
-
AntiFox AI Pentesting Platform Used in Campaign Stealing AWS Production Secrets
ler a análise desta fonte ocultar
Researchers at Arctic Wolf Labs have revealed a cyber campaign utilizing the AI-driven penetration testing tool AntiFox to compromise internet-facing IIS web services, steal AWS credentials, and conduct lateral movements. The threat actors exploited vulnerabilities to deploy ASPX web shells on compromised IIS servers, subsequently extracting configuration files and AWS secrets. The campaign involved abuse of valid IAM credentials to enumerate and access numerous AWS services, successfully obtaining production secrets in some cases. This incident underscores the emerging trend of agentic AI-powered tools accelerating penetration testing techniques in live attacks, increasing the speed and scalability of intrusions.