Google: AI agents stole credentials in six hours

Google Threat Intelligence Group reported attackers used a multi-agent AI framework to compromise thousands of credentials in under six hours. The campaign, traced to a financially motivated actor, used preconfigured markdown playbooks for scanning and harvesting, with troubleshooting and IP rotation running without an operator.