# Hackers use AntiFox AI agents in AWS credential-theft attacks

DevFeed: [Hackers use AntiFox AI agents in AWS credential-theft attacks](<https://devfeed.tech/articles/hackers-use-antifox-ai-agents-in-aws-credential-theft-attacks-129116.md>)

Original publisher: [Read original article](<https://www.bleepingcomputer.com/news/security/hackers-use-antifox-ai-agents-in-aws-credential-theft-attacks/>)

Author: Bill Toulas

Published: 2026-11-11T15:12:59Z

Content type: news

Language: en

Sources: [BleepingComputer](<https://devfeed.tech/sources/bleepingcomputer.md>)

Topics: [ai-assisted attacks](<https://devfeed.tech/topics/ai-assisted-attacks.md>), [Amazon Web Services](<https://devfeed.tech/topics/aws.md>), [Credential theft](<https://devfeed.tech/topics/credential-theft.md>), [Cybersecurity](<https://devfeed.tech/topics/cybersecurity.md>)

Tags: [agentic](<https://devfeed.tech/tags/agentic.md>), [agentic-pentesting](<https://devfeed.tech/tags/agentic-pentesting.md>), [ai](<https://devfeed.tech/tags/ai.md>), [ai-agents](<https://devfeed.tech/tags/ai-agents.md>), [ai-pentesting](<https://devfeed.tech/tags/ai-pentesting.md>), [alibaba-cloud](<https://devfeed.tech/tags/alibaba-cloud.md>), [amazon-web-services-aws](<https://devfeed.tech/tags/amazon-web-services-aws.md>), [antifox](<https://devfeed.tech/tags/antifox.md>), [apis](<https://devfeed.tech/tags/apis.md>), [artex](<https://devfeed.tech/tags/artex.md>), [artificial-intelligence](<https://devfeed.tech/tags/artificial-intelligence.md>), [attacks](<https://devfeed.tech/tags/attacks.md>), [aws](<https://devfeed.tech/tags/aws.md>), [banks](<https://devfeed.tech/tags/banks.md>), [china](<https://devfeed.tech/tags/china.md>), [computer-help](<https://devfeed.tech/tags/computer-help.md>), [computer-security](<https://devfeed.tech/tags/computer-security.md>), [computers](<https://devfeed.tech/tags/computers.md>), [credential-theft](<https://devfeed.tech/tags/credential-theft.md>), [cyberespionage](<https://devfeed.tech/tags/cyberespionage.md>), [deploy](<https://devfeed.tech/tags/deploy.md>), [ec2](<https://devfeed.tech/tags/ec2.md>), [exploitation](<https://devfeed.tech/tags/exploitation.md>), [infosec](<https://devfeed.tech/tags/infosec.md>), [infosec-computer-security](<https://devfeed.tech/tags/infosec-computer-security.md>), [linux](<https://devfeed.tech/tags/linux.md>), [mac](<https://devfeed.tech/tags/mac.md>), [malware](<https://devfeed.tech/tags/malware.md>), [malware-removal](<https://devfeed.tech/tags/malware-removal.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [penetration-testing](<https://devfeed.tech/tags/penetration-testing.md>), [pentesting](<https://devfeed.tech/tags/pentesting.md>), [security](<https://devfeed.tech/tags/security.md>), [spyware](<https://devfeed.tech/tags/spyware.md>), [support](<https://devfeed.tech/tags/support.md>), [tech-support](<https://devfeed.tech/tags/tech-support.md>), [technical-support](<https://devfeed.tech/tags/technical-support.md>), [virus](<https://devfeed.tech/tags/virus.md>), [virus-removal](<https://devfeed.tech/tags/virus-removal.md>), [web-services](<https://devfeed.tech/tags/web-services.md>), [windows](<https://devfeed.tech/tags/windows.md>)

## AI overview

Arctic Wolf observed Alibaba Cloud systems hosting AntiFox used in attacks on internet-facing web services and AWS environments. In one case, attackers deployed an ASPX webshell on an exposed IIS server, ran commands, accessed application settings and database connection strings, and copied files to a public directory. They then used valid IAM identities and assumed EC2 roles to probe AWS APIs; one intrusion generated hundreds of requests across multiple identities in about 30 minutes. Most attempts were blocked, but some succeeded and exposed production secrets. In a separate incident, attackers read, copied, and deleted S3 objects. Arctic Wolf recommends correlating IIS webshell activity with unusual AWS access, reviewing successful API calls amid denial bursts, revoking affected sessions and keys, and rotating credentials exposed in application files. AntiFox's publishers prohibit certain real-world uses, but the excerpt identifies no technical controls enforcing those restrictions.

## Source excerpt

Attackers are using Alibaba Cloud to host self-managed instances of AntiFox, an open-source agentic penetration testing platform, to target web services and AWS environments. [...]