GTIG: AI agents stole credentials in under 6h
Google Threat Intelligence Group reported on September 8, 2026 that in Q2 a suspected financially motivated actor compromised cloud infrastructure, then used an AI coding chatbot plus agent instructions and markdown playbooks to plan, build, and run a mass credential-harvesting campaign in under six hours — compromising thousands of third-party credentials with agents managing scanning, troubleshooting, and IP rotation with less human-in-the-loop delay. GTIG also described an exposed “Recon” framework dashboard that organized more than 23,800 harvested secrets including cloud and AI API keys, and said Google disrupted related assets; the report covers a broader shift to agentic adversarial workflows. This is GTIG/Mandiant’s six-hour campaign summary, not Unit 42’s separate enterprise intrusion writeup, not a how-to, and not Gemini the chat product or crypto exchange.