Attackers use AntiFox, an AI hacking tool forked from ARTEX, to plant web shells on IIS servers, take AWS keys from web.config and steal AWS secrets and S3 data (Arctic Wolf)

Arctic Wolf Labs reports real intrusions driven by AntiFox, an open-source Chinese-language AI-agent pentest framework forked from ARTEX v0.1.1, run from infrastructure on Alibaba Cloud. On exposed Microsoft IIS servers, w3wp.exe dropped an ASPX web shell. The attacker then read web.config connection strings and app settings and tried to reach an internal database with a stolen credential. The IIS flaw used to get in is unknown. In other cases the attacker started with a valid AWS credential obtained in an unknown way. With valid IAM users or an assumed EC2 role, it sent hundreds of List/Get/Describe calls across IAM, EC2, S3, Lambda, Secrets Manager, KMS, RDS, EKS, Bedrock and other services in about 30 minutes. In at least one case this led to a successful GetSecretValue on a production secret, plus S3 GetObject, CopyObject and DeleteObject. Victims and start date unknown.