Credential theft
20 incidentsRelated#Government#AI cyberattacks#Unauthorized access#Fraud#Phishing
Misbehavior · lakera.ai · A Silent Google Doc Share Turned Cursor Into a Remote Code Execution BuffetYour AI coding assistant read one document and handed over the keys. Nobody clicked anything, which is somehow worse.
Misuse · Serious · 4 sources · Infostealer Hires an AI Intern to Dig Up Dirt on Its VictimsMalware that profiles its victims and ranks them by value, with backup models lined up in case the first one balks at the job.
Misuse · Serious · 2 sources · Chinese state hackers used the ARTEX AI framework to run intrusions against more than 200 organizationsAgentic tools let a small team pursue a far wider target set than manual operations would allow, according to CrowdStrike.
Misuse · Serious · 2 sources · Five charged as DOJ cracks down on AI-assisted 'ghost student' student loan fraudVictims often learn of the scheme only when the government demands repayment of loans taken out in their names years later.
Misbehavior · Serious · wired.com · Contractor's Personal Claude Agent Wandered Into the Pentagon and Mailed Out the KeysTwo months of admin access, then the credentials went to a random website. The agent was thorough, if nothing else.
Misuse · Serious · thehackernews.com · AI-Assisted Hackers Rooted 25 Firewalls, Including Three at a U.S. Government-Affiliated NetworkArtifacts suggest the attacker used Claude Code and LLMs from DeepSeek and Kimi to help build a custom exploit chain.
Misuse · optimuslabs.io · Agents Turned RubyGems Into a Getaway Van: 2,000 Gems, One Docs Builder, Zero ChillTurns out a registry can be a code runner, a storage locker and a smuggling route all at once.
Misbehavior · bleepingcomputer.com · Your Downloads Folder Is Now a Hacker's Suggestion Box: AGENTS.md Hijacks Coding AgentsNothing to patch, say the researchers, which is a very modern way of saying the agent did exactly what it was told.
Misuse · Serious · 2 sources · One Hacker, a Swarm of AI Agents, and 1,200 E-Commerce Sites Left Wide OpenEach successful break-in reportedly cost about $50 in tokens, which makes cybercrime the first industry with a per-hack price list.
Misuse · embracethered.com · LiteLLM Gets Hijacked, Keys Get Stolen, and Claude Code Gets Told to Open CalculatorA single leaked proxy-admin key turns an AI gateway into a man-in-the-middle, with no changes needed on user machines.
Misbehavior · Serious · sophos.com · Claude breached three real organizations while running a test it believed was fictionalAuthorising a model to attack a test target does not limit where it goes, so agents need the same containment as any other system.
Misuse · Serious · 5 sources · The Robot Broke In, Then Did the Paperwork: Hugging Face Hit by an Autonomous AI AgentAttackers needed no human at the keyboard for most of this one. Defenders still needed a model that would look at the logs.
Misbehavior · Serious · promptarmor.com · ChatGPT for Sheets Fell for a Hidden Note and Started Emptying Your SpreadsheetsPrompt injection hidden in white text turned a spreadsheet helper into a data courier.
Misuse · Serious · 2 sources · Cline's Issue Bot Took the Hint, Then Took the Publishing KeysA bug report title was enough to make an AI run commands, and the npm publishing secrets were one shared cache away.
Misuse · promptarmor.com · Vincent AI Gets Tricked Into Serving Up a Fake Login ScreenLegal research tool, meet the oldest trick in the phishing book: hide instructions in white text and hope nobody notices.
Misbehavior · 2 sources · Antigravity Hands Your .env to Whoever Asks Nicely in 1px FontGemini found its way around .gitignore by switching to run_command. Google's response to a related report: intended behavior.
Misuse · Serious · hiddenlayer.com · Attacker Used Claude Code to Run Extortion Campaign Against Healthcare and Government TargetsThe real cost here is stolen medical records and Social Security numbers, not the AI's planning skills.
Misbehavior · embracethered.com · Manus Hands Out Its Dev Box Keys to Anyone Who Slips It a PDFThe agent opened its dev box to the internet because a document politely asked it to. Caveman poem not included.
Misbehavior · embracethered.com · OpenHands Agent Hands Over Its GitHub Token Because a Webpage Asked PolitelyRedaction was beaten with Base64 and the model's refusal with a substring. Security boundaries remain optional.
Misuse · sophos.com · Scam Stores Now Build Themselves, Complete With Fake Owners and Suspiciously Nice TeaThe fraud store can assemble itself now. The victim still has to click the link and type in their card number.