Symantec says it captured a malicious AI attack agent designed to find internet-exposed AI model endpoints, hijack them, and use them to carry out attacks without ongoing human approval. The agent searched for OpenAI-style APIs that accepted unauthenticated requests or stolen keys, then was instructed to steal secrets and databases, attempt remote code execution, and deploy cryptocurrency miners in a loop the operators called “Skynet mode,” with up to 100,000 autonomous steps. Researchers said they saw no confirmed real-world victim intrusions from this specific kit yet.
Why it matters: This shows threat actors are packaging long-running autonomous attack workflows around exposed AI services, creating risk both for organizations that leave model endpoints open and for downstream targets the agent may attack next. Defenders should lock down AI APIs, rotate and monitor keys, require authentication, and watch for abuse of exposed inference endpoints now.
2026.10.24
100% relevant
This article establishes a distinct threat story about a captured autonomous malicious agent purpose-built to abuse exposed AI model infrastructure for follow-on intrusions.
← Back to all stories