Attackers run self-hosted AntiFox AI pentest agents to plant webshells and steal AWS production secrets

BleepingComputer, citing Arctic Wolf, reports that attackers host self-managed instances of the open-source agentic pentest platform AntiFox, a fork of ARTEX 0.1.1, on Alibaba Cloud and use it for vulnerability exploitation, webshell deployment, credential validation, configuration discovery and AWS secret harvesting ^[1]. In one case the attacker planted an ASPX webshell on an internet-facing IIS server, copied configuration and log files, then used valid IAM users and EC2 roles to make hundreds of AWS API requests in about 30 minutes, obtaining production secrets in some cases, while another case saw S3 objects read, copied and deleted ^[1]. AWS users should correlate IIS webshell activity with unusual AWS access, review successful API calls within bursts of denials, revoke affected AWS sessions and keys and rotate credentials exposed in application files ^[1].

Industries mainly affected: Cross-industry

AWS users should correlate IIS webshell activity with unusual AWS access, review successful API calls within bursts of denials, revoke affected AWS sessions and keys and rotate credentials exposed in application files ^[1]