Story thread · 5 reports / 5 sources

Google warns AI agents are automating credential theft at unprecedented scale

biometricupdate.com · 5dShare

Agentic AI is enabling cybercriminals to coordinate complex infrastructure systems to steal credentials. These tools can manage multiple stages of an operation and reduce the time attackers spend moving between discovery, exploitation, and collection. Google's findings illustrate how AI is changing not only the scale of cybercrime but also the identity challenges organizations face. As autonomous software agents increasingly authenticate to cloud services using API keys and tokens rather than passwords, organizations are placing greater emphasis on governing machine identities alongside human ones. The Google Threat Intelligence Group (GTIG) says it observed a suspected financially motivated attacker using an AI coding chatbot and a multi-agent framework to plan, build and execute a mass credential harvesting campaign in less than six hours. Google s ays the operation compromised thousands of third-party credentials. Mandiant observed the attacker deploy the multi-agent framework after

First report: Google says attackers used AI agents to steal credentials in under six hours — siliconangle.com, 6d