AntiFox started as a fork of ARTEX 0.1.1, has a Chinese-language interface and lets users deploy AI agents that automate penetration-testing tasks such as mapping exposed services and probing for vulnerabilities. According to Arctic Wolf, infrastructure hosting AntiFox was used for vulnerability exploitation, webshell deployment, credential validation and AWS secret harvesting.
In one case the attacker deployed a webshell on an internet-facing IIS server, accessed application settings and database connection strings, and used valid AWS identities to make hundreds of API requests in about 30 minutes. Most attempts were blocked, but in some cases production secrets were obtained. In another, S3 objects were read, copied and deleted.
What to do: Arctic Wolf recommends revoking affected AWS sessions and keys, rotating credentials exposed in application files, and hunting for IIS webshell activity correlated with unusual AWS access. AntiFox remains available on GitHub; its publishers prohibit use against live systems but describe no technical controls enforcing that.