GoKawiil
Tech News
Cybersecurity experts are advising enterprises to prepare defenses against Artex and AntiFox, agentic penetration-testing tools now being used by cybercriminals. The experts say these automated tools are already in circulation and cannot be contained, making proactive security planning necessary for organizations.
Arctic Wolf researchers found attackers hosting self-managed instances of AntiFox, an open-source agentic penetration-testing platform, on Alibaba Cloud to target internet-facing web services and AWS environments. In observed intrusions, attackers deployed an ASPX webshell on an exposed IIS server, harvested configuration files and database credentials, and used valid IAM and EC2 role credentials to make hundreds of AWS API requests within minutes, successfully extracting production secrets in some cases. A separate incident involved attackers using a valid AWS identity to read, copy, and delete S3 objects.