GTIG AI Threat Tracker: From Prompting to Autonomy – The Evolution of Adversarial AI
GTIG's Q2 2026 tracker shows adversaries adopting agentic AI workflows, including credential harvesting in under six hours and supply chain attacks by UNC6780.
Google Threat Intelligence Group's Q2 2026 report documents adversaries moving from basic prompting to agentic AI workflows and automation, including a cloud compromise followed by agent-enabled mass credential harvesting executed in under six hours. It tracks financially motivated actor UNC6780 (TeamPCP) conducting large-scale open source supply chain compromises across PyPI, npm, and Docker Hub since March 2026, deploying credential stealers. The report also highlights growing targeting of proprietary AI models, source code, prompts, and API credentials, plus LLMJacking practices where adversaries steal developer credentials or hijack cloud infrastructure to run unauthorized AI workloads.
- Adversaries use multi-agent frameworks for scanning and credential harvesting
- UNC6780 (TeamPCP) hit PyPI, npm, Docker Hub since March 2026
- Threat actors target AI model weights, prompts, and API credentials
- LLMJacking: stolen credentials and hijacked clouds run unauthorized workloads
- Agent-enabled credential harvesting campaign completed in under six hours
- Tags
- adversarial-aiagentic-aicredential-harvestinggoogle-threat-intelligencellmjackingsupply-chainthreat-actorsunc6780
- Products
- PyPInpmDocker Hub
From the original article
12 min read at cloud.google.com
Executive Summary Since the release of our May 2026 report detailing adversarial misuse of artificial intelligence (AI), Google Threat Intelligence Group (GTIG) has observed forward leaning adversaries transition from basic prompting to agentic AI workflows and AI-enabled automation. In these operations, human-in-the-loop latency is dramatically reduced, compressing the traditional window for defenders to respond.
By Google Threat Intelligence Group · cloud.google.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.