# AntiFox AI Pentesting Platform Linked to Attacks That Accessed AWS Production Secrets

Source: [The Hacker News](https://thehackernews.com/2026/11/antifox-ai-pentesting-platform-linked.html) · 2026-11-11 · Security
Page: https://themorning.dev/story/antifox-ai-pentesting-platform-linked-to-attacks-that-accessed-aws-production-se-63cbf25606a5b49a
Kind: security · Impact: high

## In brief

- Researchers disclosed a campaign in which the agentic penetration testing platform AntiFox was used to steal AWS credentials.
- Attackers used the stolen access to pivot laterally into compromised environments.
- Attackers are hosting self-managed AntiFox instances on Alibaba Cloud to target web services and AWS environments.

## Why it matters

Attackers are repurposing an open-source AI pentesting tool to steal AWS credentials and move through production systems, so teams should treat exposed cloud credentials as a live target.

## Timeline

- 2026-11-11: Campaign disclosed by cybersecurity researchers

## Coverage

- [AntiFox AI Pentesting Platform Linked to Attacks That Accessed AWS Production Secrets](https://thehackernews.com/2026/11/antifox-ai-pentesting-platform-linked.html) — The Hacker News, 2026-11-11
- [Hackers use AntiFox AI agents in AWS credential-theft attacks](https://www.bleepingcomputer.com/news/security/hackers-use-antifox-ai-agents-in-aws-credential-theft-attacks/) — BleepingComputer, 2026-11-11

Tags: security, aws, credential-theft, ai-agents, pentesting

---

Brief generated by AI (claude-haiku-5-5) from the reporting listed under Coverage. Headlines belong to their publishers. The Morning Dev – https://themorning.dev