Autonomous AI Agents Compromise Thousands of Credentials in Under Six Hours

A financially motivated hacking group used an autonomous multi-agent attack framework to carry out a large-scale credential harvesting campaign. The campaign was able to compromise thousands of credentials in under six hours. The use of artificial intelligence is being leveraged by threat actors to streamline their operations. Google Threat Intelligence Group has observed this trend, noting that attackers with various motivations are targeting proprietary AI. The group's ability to act quickly and efficiently is a notable aspect of this campaign. Threat actors are continuing to utilize AI to enhance their hacking capabilities.