AntiFox AI Pentesting Platform Used in Campaign Stealing AWS Production Secrets
Researchers at Arctic Wolf Labs have revealed a cyber campaign utilizing the AI-driven penetration testing tool AntiFox to compromise internet-facing IIS web services, steal AWS credentials, and conduct lateral movements. The threat actors exploited vulnerabilities to deploy ASPX web shells on compromised IIS servers, subsequently extracting configuration files and AWS secrets. The campaign involved abuse of valid IAM credentials to enumerate and access numerous AWS services, successfully obtaining production secrets in some cases. This incident underscores the emerging trend of agentic AI-powered tools accelerating penetration testing techniques in live attacks, increasing the speed and scalability of intrusions.
Linha do tempo
-
AntiFox AI Pentesting Platform Used in Campaign Stealing AWS Production Secrets
ler a análise desta fonte ocultar
Researchers at Arctic Wolf Labs have revealed a cyber campaign utilizing the AI-driven penetration testing tool AntiFox to compromise internet-facing IIS web services, steal AWS credentials, and conduct lateral movements. The threat actors exploited vulnerabilities to deploy ASPX web shells on compromised IIS servers, subsequently extracting configuration files and AWS secrets. The campaign involved abuse of valid IAM credentials to enumerate and access numerous AWS services, successfully obtaining production secrets in some cases. This incident underscores the emerging trend of agentic AI-powered tools accelerating penetration testing techniques in live attacks, increasing the speed and scalability of intrusions.