GoKawiilAttackers weaponize AntiFox AI pentesting tool for AWS credential theft
Arctic Wolf researchers found attackers hosting self-managed instances of AntiFox, an open-source agentic penetration-testing platform, on Alibaba Cloud to target internet-facing web services and AWS environments. In observed intrusions, attackers deployed an ASPX webshell on an exposed IIS server, harvested configuration files and database credentials, and used valid IAM and EC2 role credentials to make hundreds of AWS API requests within minutes, successfully extracting production secrets in some cases. A separate incident involved attackers using a valid AWS identity to read, copy, and delete S3 objects.
GoKawiil's interpretation of the reporting above, not reported fact.
The incidents suggest attackers are repurposing legitimate AI-driven security tools to automate reconnaissance and exploitation at scale, potentially lowering the skill barrier for cloud credential theft. Arctic Wolf's findings indicate organizations need to correlate on-premises compromise indicators, like webshell activity, with anomalous cloud API behavior to catch these cross-environment attacks. The use of valid, stolen credentials rather than exploiting new vulnerabilities could make such intrusions harder to detect with traditional alerting.
- Attackers used Alibaba Cloud-hosted AntiFox instances to automate attacks against web services and AWS
- Compromised IAM and EC2 role credentials were used to make hundreds of AWS API calls within a short window
- Arctic Wolf recommends correlating IIS webshell activity with unusual AWS API patterns to detect such intrusions
Yubico YubiKey 5 NFC — With attackers actively harvesting AWS credentials and probing IAM users for weaknesses, hardware-based MFA is one of the strongest defenses available. A YubiKey adds a phishing-resistant second factor to AWS console and IAM logins, making stolen credentials far less useful to attackers like those behind these AntiFox-linked intrusions.
See Yubico YubiKey 5 NFC on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: bleepingcomputer.com, 2026-11-11
Published there as: “Hackers use AntiFox AI agents in AWS credential-theft attacks”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.