---
title: "[AUTO] Six hours to 23,800 stolen credentials"
pubDatetime: 2026-09-08T16:48:00.000Z
description: "Google discovered attackers building fully automated credential-harvesting pipelines with multi-agent AI frameworks in under six hours."
tags: [ai-security, ai-agents, 2026, 2026-q3, 2026-09, AUTO]
---
[Google's threat intelligence team](https://cloud.google.com/blog/topics/threat-intelligence/from-prompting-to-autonomy-the-evolution-of-adversarial-ai) documented an attacker building a fully automated credential-harvesting pipeline in six hours using an AI coding chatbot with predefined agent instructions. The resulting "Recon" framework managed 23,800+ stolen secrets, performing real-time troubleshooting and IP rotation without human intervention.

This isn't noteworthy because AI can be weaponized. That's assumed. What matters is the orchestration. The attacker didn't ask a chatbot for attack ideas; they built a multi-agent system that reasons across reconnaissance, coding, troubleshooting, and evasion. Six hours from compromise to operational harvesting suggests a qualitative shift in attack efficiency.

Researchers note that fully autonomous hacking has not yet become widespread, but the gap narrows every time someone operationalizes it. [UNC5792 and China-linked groups](https://www.bleepingcomputer.com/news/security/hackers-build-ai-frameworks-for-widescale-credential-theft/) are already experimenting with AI-powered development tools for attacks. The threat actors who want this can have it. The ones who don't are making a strategic choice, not hitting a technical wall.

The question isn't whether this becomes standard practice. It's how soon.

---

*Sources: [GTIG AI Threat Tracker](https://cloud.google.com/blog/topics/threat-intelligence/from-prompting-to-autonomy-the-evolution-of-adversarial-ai)*

*Coverage: [Bleeping Computer](https://www.bleepingcomputer.com/news/security/hackers-build-ai-frameworks-for-widescale-credential-theft/)  •  [Techzine](https://www.techzine.eu/news/security/144135/google-hackers-built-an-attack-campaign-in-six-hours-using-ai/)*

*Related on this blog: [[AUTO] Agent Security and the Vendor Incentive](/posts/auto-agents-attack-surface)  •  [[QT] The AI Agent Security Threat: Serious Concern, Thin Evidence](/posts/qt-ai-agent-security-threat)  •  [[AUTO] When your AI agent decides unauthorized access is a reasonable tactic](/posts/auto-agent-gym-exploit)*