Threat actors are leveraging Alibaba Cloud to host instances of AntiFox, an open-source agentic penetration testing framework. This setup is being actively used to automate attacks against web services and extract AWS credentials. Security teams should monitor cloud environments for suspicious API activity and unauthorized outbound connections.
READ THE ORIGINAL ARTICLE AT BLEEPINGCOMPUTER.COM →