Researchers Link AntiFox Platform to Intrusions Accessing AWS Production Secrets
Summary
Arctic Wolf linked AntiFox-hosting Alibaba Cloud systems to intrusions involving IIS web shells and AWS credential abuse; some operations accessed a production secret. Separate research describes ARTEX-driven attacks at scale.
Key points
- Arctic Wolf reported that Alibaba Cloud systems hosting AntiFox interfaces were associated with confirmed malicious actions against internet-facing web services and AWS environments.
- Observed IIS activity included creating an ASPX web shell through w3wp.exe and running commands to inspect the application environment; the vulnerability used for code execution is unknown.
- In separate observed activity, valid AWS IAM credentials were used to enumerate services. Most requests were denied, but some operations accessed a production secret or performed S3 discovery and object operations.
- Check Point Research reported finding 2,557 ARTEX-hosting systems, including 10 misconfigured instances exposing full databases; researchers cautioned that exposed instances are not necessarily malicious.
- An ARTEX campaign targeting Apple code-signing certificates was estimated to have harvested more than 300 certificates and passwords; three certificates passed the reported validation process.
- Researchers and CERT-EU warned that agentic tools can automate and scale established attack techniques, while the article notes that many exposed ARTEX consoles may not be malicious.
Article Details
- Event Type
- Reported use of the AntiFox agentic penetration-testing platform in intrusions targeting internet-facing web services and associated AWS environments.
- Impact
- Arctic Wolf Labs reported that activity associated with AntiFox included deployment of an ASPX web shell on a compromised IIS application and use of valid AWS IAM identities to enumerate services. In at least some instances, operators successfully accessed a production secret through Secrets Manager; AWS S3 discovery and object operations were also observed. The report does not establish that data was exfiltrated from these environments.
MITRE ATT&CK
T1033 · System Owner/User DiscoveryCommands run through the IIS worker process used whoami to identify the execution context.T1078.004 · Cloud AccountsThe reported activity used valid AWS IAM identities to validate credentials and access cloud services.T1083 · File and Directory DiscoveryCommands on a compromised IIS server enumerated the application directory.T1505.003 · Web ShellArctic Wolf reported deployment and command execution of an ASPX web shell on a compromised IIS server.T1526 · Cloud Service DiscoveryOperators enumerated AWS services, including IAM, EC2, S3, Lambda, and Secrets Manager.
Vendors
Alibaba Cloud"In several recently observed intrusions, Alibaba Cloud systems hosting AntiFox interfaces were associated with confirmed malicious actions against internet-facing web services and associated AWS environments," ArcticAmazon Web Servicesin which an emerging agentic penetration testing platform called AntiFox has been used to steal Amazon Web Services (AWS) credentials and pivot laterally into compromised environments.
Products
AWSemerging agentic penetration testing platform called AntiFox has been used to steal Amazon Web Services (AWS) credentials and pivot laterally into compromised environments.Internet Information Services (IIS)Wolf, some of the initial access activity is associated with a compromised internet-facing Internet Information Services (IIS) application. The access is then leveraged to create an ASPX web shell using "w3wp.exe," theSecrets Manageridentities to validate credentials and enumerate dozens of services, including IAM, EC2, S3, Lambda, Secrets Manager, KMS, RDS, ECS, EKS, Redshift, Athena, Glue, Systems Manager, API Gateway, CloudWatch,
Tools
AntiFoxhave disclosed details of a campaign in which an emerging agentic penetration testing platform called AntiFox has been used to steal Amazon Web Services (AWS) credentials and pivot laterally into compromisedARTEXdisclosure comes as threat actors are increasingly weaponizing AI-powered penetration testing tools like ARTEX to conduct broad-scale attacks across the world, enabling them to automate various stages of an intrusion
Countries
Chinaan exposed ARTEX console as of November 4, 2026, with most of them located in the U.S., Hong Kong, China, Japan, Singapore, and South Korea. However, it's worth noting that not every instance is necessarilyJapanan exposed ARTEX console as of November 4, 2026, with most of them located in the U.S., Hong Kong, China, Japan, Singapore, and South Korea. However, it's worth noting that not every instance is necessarily maliciousSingaporeARTEX console as of November 4, 2026, with most of them located in the U.S., Hong Kong, China, Japan, Singapore, and South Korea. However, it's worth noting that not every instance is necessarily malicious in nature.South Koreaas of November 4, 2026, with most of them located in the U.S., Hong Kong, China, Japan, Singapore, and South Korea. However, it's worth noting that not every instance is necessarily malicious in nature.United Statesare 1,465 hosts running an exposed ARTEX console as of November 4, 2026, with most of them located in the U.S., Hong Kong, China, Japan, Singapore, and South Korea. However, it's worth noting that not every instance