Attackers use AntiFox AI agents in AWS credential-theft attacks
Original title: Hackers use AntiFox AI agents in AWS credential-theft attacks
Arctic Wolf says Alibaba-hosted AntiFox instances planted an IIS webshell and obtained some production AWS secrets.
Arctic Wolf says attackers hosted self-managed AntiFox, an open-source agentic penetration-testing platform forked from ARTEX 0.1.1, on Alibaba Cloud and used it against internet-facing web services and AWS environments. In one case they deployed an ASPX webshell on an exposed IIS server, read application settings and database strings, and copied configuration and log files to a web-accessible directory. Using valid IAM users and some assumed EC2 roles, they made hundreds of AWS API requests in about 30 minutes; most were blocked, but some production secrets were obtained. In another incident a valid AWS identity was used to read, copy, and delete S3 objects.
Unconfirmed: CrowdStrike’s Vapor Panda link concerns ARTEX, not these AntiFox cases.
- AntiFox has a Chinese-language interface and is still on GitHub at version 2.0.
- One intrusion cycled through identities and sent hundreds of API calls in about 30 minutes.
- Most AWS attempts were blocked, but some production secrets were obtained.
- A separate case used a valid identity to read, copy, and delete S3 objects.
- Publishers prohibit live or illegal use but describe no technical enforcement.
Impact: Webshell access, AWS secrets, and S3 object theft or deletion
- 1.Correlate IIS webshell activity with unusual AWS access.
- 2.Review successful API calls inside bursts of denials.
- 3.Revoke affected AWS sessions and keys and rotate credentials exposed in application files.
- ATT&CK
- T1505.003 Web ShellT1078 Valid AccountsT1552.001 Credentials In FilesT1530 Data from Cloud Storage
- Malware
- ARTEX
- Organizations
- Arctic Wolf
From the original article
2 min read at bleepingcomputer.com
Attackers are using Alibaba Cloud to host self-managed instances of AntiFox, an open-source agentic penetration testing platform, to target web services and AWS environments. [...]
By Bill Toulas · bleepingcomputer.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.