Hackers build AI frameworks for widescale credential theft

Google Threat Intelligence Group observed financially motivated hackers using an autonomous multi-agent framework to harvest thousands of credentials in under six hours. The group TeamPCP deployed credential stealers SANDCLOCK and DUSTMAKER, targeting AI coding assistants and cloud environments for extortion and resource theft.