threat-intel
Attacker Relentlessly Scans for Credentials by Impersonating AI Bots
Info
Summary
A threat actor has been relentlessly scanning networks impersonating over 30 AI bots, including agents from OpenAI, Anthropic, and Meta, to steal exposed credentials and configuration files. While most requests were blocked, the scanner’s unusual behavior – rotating through multiple bot identities and requesting sensitive files – revealed its malicious intent, raising concerns about potential credential compromise, particularly within financial institutions.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data