Google Threat Intelligence Group Warns of Autonomous AI Agentic Attack Systems
Google's Threat Intelligence Group (GTIG) has identified the deployment of autonomous, multi-agent AI frameworks by state-sponsored actors (UNC6508, UNC6780) and cybercriminals to automate the full attack lifecycle. These systems utilize LLMs like Gemini and Claude via custom pipelines—including the DUSTMAKER stealer and Phalanx framework—to conduct rapid reconnaissance and credential harvesting, with some campaigns compromising thousands of secrets in under six hours. Attackers leverage supply chain compromises in PyPI and npm to install LLM proxy services and use victim compute for local LLM inference to bypass API monitoring. This shift represents a transition from manual prompting to self-correcting, agentic execution loops that evade traditional signature-based defenses.
Threat Actors Targeting Enterprise AI Assets for Operationalization
Threat actors are targeting enterprise AI assets—model weights, source code, API keys, and cloud compute—to exfiltrate proprietary LLMs, conduct distillation attacks harvesting >100 million prompts, and hijack resources for LLMJacking. They deploy autonomous frameworks such as Recon (managing >23 800 credentials), DUSTMAKER (stealer with hidden‑dir persistence, CI/CD OIDC theft, prompt‑injection evasion), and Phlanx, reducing human‑in‑the‑loop latency for credential campaigns to under six hours. State‑linked groups (e.g., UNC6508) establish local LLM instances in compromised clouds to evade API monitoring.