When Your AI Bot Is Actually a Threat Actor: The 2026 Credential Scan Campaign
Beginning in late September 2026, an unidentified threat actor launched a persistent, automated credential-harvesting campaign by impersonating more than 32 legitimate AI bots—including crawlers and assistants attributed to OpenAI, Anthropic, Perplexity, and Meta. Operating around the clock, the scanner fired bursts of 50–190 HTTP requests in under eight seconds per target, probing roughly 90 file paths known to contain passwords, API keys, SSH private keys, and cloud credentials. On a single day in October 2026, 48% of organizations protected by Cequence Security received the malicious traffic. Targeted sectors included retail, financial services, telecommunications, energy, and software. Nearly all requests were blocked or failed, but the campaign remained active as of late October 2026. This incident underscores a structural shift in the threat landscape: as enterprises accelerate AI agent adoption, attackers are weaponizing AI identity itself. The ability to rotate through dozens of trusted bot personas in seconds exposes a critical gap in perimeter and API security controls that were designed for human or single-service traffic patterns, not polymorphic machine identities.
Kill Chain
