Symantec uncovers AI attack agent designed to hijack exposed models for autonomous attacks
Researchers captured the agent's full instruction set in a honeypot, revealing a tool that can run up to 100,000 steps without human approval
Security researchers have uncovered an AI agent built by threat actors to scan the internet for exposed AI models, hijack them, and run autonomous attacks including database theft, credential harvesting, and cryptocurrency mining, all without human approval. The Symantec Threat Hunter Team captured the agent's full instruction set in an AI honeypot over the summer, giving researchers a detailed view of the tool's capabilities. The agents have found no evidence that the tool has been used in real-world attacks yet.