Case gtig-six-hour-credential-harvestAgent hijackWorldwide
Mandiant case: AI agent built from one prompt harvests thousands of credentials in 6 hours
A financially motivated actor already inside a victim cloud turned a coding chatbot, one prompt and markdown playbooks into an autonomous system that harvested thousands of credentials and rotated IPs via that cloud.
CriticalAttack using AIStatus: ContainedVerified case file
Open in the interactive mapCite this case
- Reported
- Sep 8, 2026
- Location
- Worldwide
- Target
- Compromised cloud tenant and its third-party credentials
- Severity
- Critical
- Triggered by
- Unnamed financially motivated actor
- Actor type
- Criminal
- Reported loss
- None reported
- CVE
- None
What happened
A financially motivated actor already inside a victim cloud turned a coding chatbot, one prompt and markdown playbooks into an autonomous system that harvested thousands of credentials and rotated IPs via that cloud.
Impact: Thousands of third-party credentials stolen in under six hours; the victim's IP space used to mask traffic.
Who triggered it
Actor: Unnamed financially motivated actor
Attribution: Mandiant incident response in Q2 2026; actor not named.
Motive: Credential theft for resale and follow-on intrusion
How it happened
Attack vector: Agentic coding assistant driven by markdown agent instructions acting as an operational playbook
Root cause: Existing cloud compromise plus off-the-shelf AI agents removed the human bottleneck
Timeline
- Intrusion occurs during Q2 2026 and is investigated by Mandiant
- GTIG publishes the case in its From Prompting to Autonomy report
Response
Mandiant response; Google released AI Threat Defense and Gemini 3.8 Flash Cyber detections.
Current status: Contained
Sources (open in a new tab)
- GTIG From Prompting to Autonomy cloud.google.com
- CSA research note labs.cloudsecurityalliance.org
- Let's Data Science coverage letsdatascience.com
Cite this case
Mandiant case: AI agent built from one prompt harvests thousands of credentials in 6 hours. AI Threat Watch, case gtig-six-hour-credential-harvest, Sep 8, 2026. https://aithreat.io/cases/gtig-six-hour-credential-harvest/
Permanent link: https://aithreat.io/cases/gtig-six-hour-credential-harvest/