Attacker infrastructure, but vibe-coded: tracking the evolution of credential harvesting platforms
Datadog researchers document two unauthenticated, AI-built credential harvesting dashboards, Loot and UltraVault, holding 42,000+ stolen secrets and actively abusing AWS and AI keys.
Since July 2026, Datadog Security Research has tracked two credential harvesting platforms, Loot and UltraVault, at times hosted on the same server and accessible without authentication. Loot indexes 26,733 stolen keys, including 1,778 AI provider credentials across 15 providers such as OpenAI, Gemini, and Anthropic, while UltraVault claims 42,286 secrets (2.7% live) and maps targets to five exploitation chains including react2shell (CVE-2025-55182), wp2shell (CVE-2026-63030, CVE-2026-60137), xss2shell (CVE-2026-64638), and joomla2shell (CVE-2026-48907). Both platforms re-probe stolen credentials, and Datadog observed live Amazon Bedrock abuse via GetCallerIdentity, ListFoundationModels, and InvokeModel calls. The dashboards show hallmarks of LLM-assisted 'vibe coded' development, echoing Google Threat Intelligence Group's earlier 'Recon' finding of a C2 managing 23,800+ harvested secrets.
- Loot exposes 26,733 credentials in plaintext, including 1,778 AI provider keys across 15 providers
- UltraVault claims 42,286 secrets with only 2.7% live and recommends exploits per compromised host
- Five tracked exploitation chains: react2shell, wp2shell, xss2shell, joomla2shell, and deep
- Live Amazon Bedrock abuse observed via GetCallerIdentity, ListFoundationModels, and InvokeModel calls
- Dashboards show LLM-assisted development hallmarks, treating LLMjacking as a product category
- ATT&CK
- T1190 Exploit Public-Facing ApplicationT1552 Unsecured CredentialsT1078 Valid AccountsT1528 Steal Application Access Token
- Tags
- amazon-bedrockapi-keysattacker-infrastructureawscredential-harvestingllmjackingopenaivibe-coding
- Malware
- Recon
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-55182 | Unauthenticated RCE in React Server Components (React2Shell) | 10.0 | 100% | KEVRansomwarePoC ×14 | KEV |
| CVE-2026-48907 | Unauthenticated PHP Code Upload and Execution in Joomla Content Editor (JCE) | 10.0 | 85% | KEVPoC ×4 | KEV |
CVE-2026-63030+1 related CVE | WordPress Core Route Confusion (wp2shell) Enables SQL Injection to RCE | 9.8 group max | 11% | KEVPoC ×9 | KEV |
| CVE-2026-64638 | Pre-Auth Reflected XSS in WordPress Login Screen Can Escalate to RCE | 8.9 | 31% |
From the original article
9 min read at securitylabs.datadoghq.com
In this post, we examine two vibe-coded credential harvesting platforms, Loot and UltraVault, and the Amazon Bedrock abuse used to validate stolen secrets.
By @datadoghq · securitylabs.datadoghq.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.