Summary

Attackers are using Alibaba Cloud to host self-managed instances of AntiFox, an open-source agentic penetration testing platform, to target web services and AWS environments. The infrastructure hosting AntiFox was used for various malicious activities, including vulnerability exploitation, webshell deployment, credential validation, configuration discovery, and AWS secret harvesting.

AI summaries can be wrong sometimes—always verify important details using the source article.