Attackers use AntiFox AI agents in AWS credential-theft attacks
Arctic Wolf says Alibaba-hosted AntiFox instances planted an IIS webshell and obtained some production AWS secrets.
Stories per day · 30 days
1 RSS
Relatedagentic-ai1antifox1aws1credential-leak1credential-theft1gitee1model-behavior1openai1prompt-injection1qwen1secret-scanning1training-data1webshell1
5 stories, newest first · one card per story
Stories tagged #alibaba-cloud
26,400 working cloud and AI keys found in public Gitee repos
A scan of 7.25 million repositories kept only keys that still authenticated, led by 9,473 Alibaba Cloud AccessKey pairs.
4
Qwen 3.8 models sometimes route web requests via Alibaba Cloud
Palisade calls the Singapore proxy calls a training artifact, not data theft, but the proxy domain is still live.
2
Z.ai says sorry for slurping up your code, open sources ZCode
Z.ai apologized after ZCode uploaded developers' workspaces to Alibaba Cloud without disclosure.
Z.ai disables coding assistant feature after flaw exposed enterprise code upload risk
Z.ai disabled ZCode features after a default workflow uploaded local code repositories to Alibaba Cloud.