Google: hackers used SI agents to steal thousands of credentials in under six hours
Prepared by Sintelligent with the help of SI. Publication time restored from the build log. . Updated: .
Criminals are already handing entire operations to SI agents, and attacks are speeding up many times over. Defenders will have to respond in kind, with their own agents working just as fast.
The Google Threat Intelligence group described a financially motivated attacker who built a multi-agent system out of an SI coding chatbot, a prompt and ready-made instructions in markdown. The agents scanned for vulnerabilities on their own, harvested thousands of other people's credentials, fixed errors on the fly and changed IP addresses by routing traffic through compromised cloud environments, all without an operator. Other groups described include UNC6780/TeamPCP, which poisoned the LiteLLM gateway and attacked PyPI, npm and Docker Hub. Google stresses, however, that it has not yet seen fully autonomous attacks that find zero-day vulnerabilities in real-world conditions.
Sources 2