Autonomous AI Agents Steal Thousands of Credentials in Six Hours

Google Threat Intelligence Group observed a financially motivated hacking group using an autonomous multi-agent framework to harvest thousands of credentials in under six hours. The campaign targeted AI models across healthcare, government, and media, exfiltrating API credentials and co-opting cloud environments for unauthorized AI workloads.