Autonomous AI Agents Compromise Thousands of Credentials in Under Six Hours

Threat actors are continuing to leverage artificial intelligence (AI) to streamline their operations, with one financially motivated hacking group employing an autonomous, multi-agent attack framework to carry out a large-scale credential harvesting campaign within six hours. Google Threat Intelligence Group (GTIG) said it has observed attackers with diverse motivations targeting proprietary AI

Fact: A financially motivated hacking group used an autonomous, multi-agent AI attack framework to run a large-scale credential harvesting campaign that compromised thousands of credentials in under six hours, as reported by Google’s Threat Intelligence Group. Fact: GTIG also observed attackers with varied motivations targeting proprietary AI systems, indicating growing operationalization of AI in offensive campaigns. RealGround analysis: This demonstrates that autonomous AI agents can rapidly scale credential theft and target AI infrastructure itself, so organizations using agents need rigorous controls on agent capabilities, authentication flows, and data access. RealGround analysis: Applying secure agent design, business-logic-focused threat modeling, and continuous AI red teaming can help identify and constrain attack paths before similar autonomous frameworks are used against an organization’s AI-driven systems.