Hackers use AntiFox AI agents in AWS credential-theft attacks

Attackers are using Alibaba Cloud to host self-managed instances of AntiFox, an open-source agentic penetration testing platform, to target web services and AWS environments. The campaign focuses on stealing AWS credentials, leveraging the AI agents to automate attacks and evade detection, according to security researchers tracking the threat.