Skip to content
NewA calmer, faster ZeroHour
StoryThreat actorhigh

AntiFox agents used in attacks that reached AWS production secrets

2 sources · 2 articlesFirst reported Updated ()
What's new

First merged summary.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

Arctic Wolf says Alibaba-hosted AntiFox instances were used to reach some AWS production secrets after webshell and valid-credential activity.

Arctic Wolf says attackers hosted self-managed AntiFox, an open-source agentic penetration-testing platform forked from ARTEX 0.1.1, on Alibaba Cloud and used it against internet-facing web services and AWS environments. On one exposed IIS server, activity through w3wp.exe planted an ASPX webshell, read application settings, database strings, configuration, and logs, copied files to a web-accessible directory, and tried an internal database login with an extracted credential. Valid IAM users and some assumed EC2 roles then made hundreds of AWS API calls in about 30 minutes; most were blocked, but some production secrets were obtained, including a successful GetSecretValue call. In another case a valid AWS identity read, copied, and deleted S3 objects. The IIS vulnerability and how some credentials were first obtained are not known. AntiFox remains on GitHub at version 2.0; publishers prohibit illegal use but describe no technical enforcement.

Key facts
  • AntiFox is a GitHub agentic pentest project, version 2.0, forked from ARTEX 0.1.1.
  • The Hacker News reports 474 stars and 251 forks.
  • One intrusion sent hundreds of AWS API calls in about 30 minutes.
  • GetSecretValue succeeded against a production secret; most other AWS attempts were blocked.
  • A separate case used a valid identity to read, copy, and delete S3 objects.
  • How the IIS flaw and some AWS credentials were first obtained is unknown.
Explain this AI news with Vani AIWhat was announced, what is new and why it matters, in a new chat

What each outlet adds

beyond the shared facts
  • BleepingComputerFork lineage, version 2.0, 30-minute API burst, and lack of technical enforcement.
  • The Hacker NewsGetSecretValue success, GitHub stats, w3wp.exe activity, and unknown initial access.
Vendors
Amazon Web ServicesAlibaba Cloud
Products
AntiFoxARTEXIIS
Malware
ARTEX
Organizations
Arctic Wolf LabsVECERTCheck Point ResearchCensysArctic Wolf
AI models
OpenAIDeepSeek

Coverage

oldest first · one row per article · UTC
  1. · 5h ago BleepingComputerFirst report

    Attackers use AntiFox AI agents in AWS credential-theft attacks

    Arctic Wolf says Alibaba-hosted AntiFox instances planted an IIS webshell and obtained some production AWS secrets.

  2. · 5h ago The Hacker News

    AntiFox AI pentest tool tied to AWS secret theft

    Arctic Wolf says attackers used AntiFox after web shells and valid AWS credentials, including a successful production GetSecretValue call.