Google Warns of AI Agents Accelerating Cyberattacks

Cybersecurity researchers are warning that threat actors are increasingly leveraging artificial intelligence agents to automate and accelerate cyberattacks, with one financially motivated group successfully executing a mass credential-harvesting campaign in under six hours. The findings, detailed by Google Threat Intelligence Group (GTIG), indicate a significant shift from simple AI chatbot interactions to more sophisticated, autonomous frameworks capable of planning, building, and executing complex intrusions with minimal human oversight.

In a notable incident, attackers compromised an organization's cloud infrastructure and deployed an autonomous, multi-agent attack framework. Utilizing an AI coding chatbot, a specific prompt, and agent instructions, the threat actor was able to plan, build, and execute a large-scale credential harvesting operation in less than six hours. This campaign compromised thousands of third-party credentials. The AI agents autonomously managed the vulnerability scanning pipeline, performed real-time troubleshooting, and executed IP rotation logic, allowing attack traffic to pass through legitimate IP addresses from the victim's cloud environment,...