{"slug": "arctic-wolf-antifox-an-open-source-ai-pentest-platform-used-to-raid-aws-secrets", "title": "Arctic Wolf: AntiFox, an open-source AI pentest platform, used to raid AWS secrets", "summary": "Attackers are hosting self-managed instances of AntiFox, an open-source agentic penetration-testing platform, on Alibaba Cloud and using them to harvest AWS secrets, Arctic Wolf researchers reported. In one intrusion, the attacker cycled through multiple valid AWS identities, including IAM users and assumed EC2 roles, and made hundreds of API requests in about 30 minutes; most attempts were blocked but some succeeded and obtained production secrets, while a separate incident saw a valid AWS identity read, copy and delete S3 objects. AntiFox, a fork of ARTEX 0.1.1 with a Chinese-language interface, remains on GitHub at version 2.0, and its publishers prohibit use against live systems but describe no technical controls enforcing that restriction.", "body_md": "Attackers are using Alibaba Cloud to host self-managed instances of AntiFox, an open-source agentic penetration testing platform, to target web services and AWS environments.\n\nThe infrastructure hosting AntiFox was used for various malicious activities, including vulnerability exploitation, webshell deployment, credential validation, configuration discovery, and AWS secret harvesting.\n\nInitially created as a fork of ARTEX 0.1.1, [AntiFox](https://github.com/AntiFox-AI/antifox/blob/main/README.en.md) has a Chinese-language interface and lets users deploy AI agents and automate common penetration-testing tasks, such as mapping exposed services and probing target endpoints for vulnerabilities.\n\nSecurity researchers at Arctic Wolf observed malicious AntiFox-linked infrastructure hosted on Alibaba Cloud using valid AWS identities, including IAM users and, in some cases, assumed EC2 roles, to make authenticated requests to Amazon Web Services APIs.\n\n“In several recently observed intrusions, Alibaba Cloud systems hosting AntiFox interfaces were associated with confirmed malicious actions against internet-facing web services and associated AWS environments,” [Arctic Wolf says](https://github.com/rtkwlf/wolf-tools/tree/main/pack_alerts/202611-antifox-alibaba-hosted-platforms-facilitate-web-cloud-intrusions).\n\nOne case highlighted in the report involved deploying an ASPX webshell on an internet-exposed IIS server, executing OS commands, accessing application settings and database connection strings, and copying configuration and log files to a web-accessible directory.\n\nThe attacker also used valid IAM credentials and EC2 roles to probe Amazon Web Services (AWS) endpoints. In one intrusion, they cycled through multiple identities and made hundreds of API requests in about 30 minutes, the researchers note.\n\nAlthough most of these attempts were blocked, the attacker was successful in some cases and obtained production secrets.\n\nIn a separate incident, the attackers used a valid AWS identity to read, copy, and delete S3 objects.\n\nArctic Wolf's report includes hunting guidance and recommendations for defenders that include correlating IIS webshell activity with unusual AWS access and reviewing successful API calls within bursts of denials.\n\nThe researchers also recommend revoking affected AWS sessions and keys and rotating credentials exposed through application files.\n\nThe AntiFox findings follow recent attacks involving ARTEX AI, another [agentic penetration-testing framework](https://www.bleepingcomputer.com/news/security/former-pentester-used-artex-ai-to-steal-82-million-data-records/) developed in China that went closed-source after it was used in [attacks on South Korean banks](https://www.bleepingcomputer.com/news/security/hacker-used-artex-ai-and-claude-agents-to-target-south-korean-banks/).\n\nCrowdStrike also linked ARTEX to a cyberespionage campaign in which the Chinese hacking group [Vapor Panda](https://www.bleepingcomputer.com/news/security/chinese-hackers-use-artex-ai-in-automated-attacks-against-200-orgs/) targeted more than 200 organizations across 14 countries.\n\nFor now, AntiFox remains available on GitHub, where it has been updated to version 2.0, which improves how the tool documents and reports findings.\n\nIts publishers prohibit using the tool against live systems, in real-world penetration tests or security exercises, or for destructive or illegal activity, but they do not describe any technical controls that enforce those restrictions.\n\n## \n[Uncover email threats your existing defenses may miss.](https://www.adaptivesecurity.com/lp/nb/email-scan?utm_source=display_network&utm_medium=paid_display&utm_campaign=2026_NA_Q4_Bleepingcomputer_Inadunit_October2026_scan&utm_id=701Rd00000sqmWCIAY)\n\nAdaptive Security's AI agents analyze email intent, context, and behavior to uncover phishing, business email compromise, and invoice fraud.\n\nSee what's getting through with a 14-day read-only scan of Microsoft 365 or Google Workspace, with no MX changes.\n\n[Start your free email security scan.](https://www.adaptivesecurity.com/lp/nb/email-scan?utm_source=display_network&utm_medium=paid_display&utm_campaign=2026_NA_Q4_Bleepingcomputer_Inadunit_October2026_scan&utm_id=701Rd00000sqmWCIAY)", "url": "https://wpnews.pro/news/arctic-wolf-antifox-an-open-source-ai-pentest-platform-used-to-raid-aws-secrets", "canonical_source": "https://www.bleepingcomputer.com/news/security/hackers-use-antifox-ai-agents-in-aws-credential-theft-attacks/", "published_at": "2026-11-11 16:49:50+00:00", "updated_at": "2026-11-11 17:21:00.476791+00:00", "lang": "en", "topics": ["ai-agents", "ai-safety", "artificial-intelligence"], "entities": ["Arctic Wolf", "AntiFox", "Alibaba Cloud", "Amazon Web Services", "ARTEX", "CrowdStrike", "Vapor Panda", "GitHub"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/arctic-wolf-antifox-an-open-source-ai-pentest-platform-used-to-raid-aws-secrets", "markdown": "https://wpnews.pro/news/arctic-wolf-antifox-an-open-source-ai-pentest-platform-used-to-raid-aws-secrets.md", "text": "https://wpnews.pro/news/arctic-wolf-antifox-an-open-source-ai-pentest-platform-used-to-raid-aws-secrets.txt", "jsonld": "https://wpnews.pro/news/arctic-wolf-antifox-an-open-source-ai-pentest-platform-used-to-raid-aws-secrets.jsonld"}}