Autonomous AI Agents Compromise Thousands of Credentials in Under Six Hours

Google's Threat Intelligence Group reports that the financially motivated hacking group TeamPCP used autonomous AI agents to steal thousands of credentials in under six hours, targeting AI models and developer tools across sectors. They exploited software supply chains and deployed advanced credential stealers like SANDCLOCK and DUSTMAKER to monetize stolen data via ransomware and extortion partnerships.