Security researchers from Symantec uncovered an autonomous AI attack agent designed to hijack exposed AI models and execute up to 100,000 steps of malicious activity without human intervention. The AI-powered tool scans the internet for vulnerable OpenAI-style endpoints, exploits various web frameworks to steal data and credentials, executes remote code, and deploys covert cryptocurrency miners, operating in a “Skynet mode” that continuously reinfects hosts. Although the agent has not been observed in real-world attacks, its capability to use hijacked models for orchestrating complex cyberattacks marks a significant evolution in AI-driven threats.
Autonomous Attack Agent in ‘Skynet Mode’ Hijacks Other Models to Carry Out Its Evil Deeds

