AntiFox AI Pentesting Platform Linked to Attacks That Accessed AWS Production Secrets
Researchers have linked the AntiFox AI pentesting platform to a campaign that compromised Amazon Web Services (AWS) production secrets through lateral movement. AntiFox, an AI-driven autonomous penetration testing platform available on GitHub, was used to steal AWS credentials and access compromised environments. The platform's capabilities include web exploitation, web shell deployment, and configuration discovery, allowing attackers to enumerate cloud services, access secrets, and perform storage operations. This vulnerability highlights the potential risks of using open-source AI-powered tools for penetration testing, as they can be exploited by malicious actors to compromise sensitive information.
Save an API key to vote.