Investigating Suspicious AI Workflows in Microsoft Entra Agent ID
In May 2026, a security incident was identified involving a Microsoft Entra Agent ID user account named MrRoboto4@ContosoCorp.onmicrosoft.com. This agent user sent a suspicious Teams message containing a potentially malicious link to https://domoarigato.ai/. The message was reported by a human user, prompting an investigation. Analysis revealed that the agent user had been granted extensive permissions, allowing it to perform actions typically reserved for human users, such as sending messages and emails. The agent's activities were executed via the Graph API from an external IP address, highlighting potential security gaps in monitoring and controlling AI-driven workflows within enterprise environments. This incident underscores the growing security challenges posed by AI agents operating autonomously within organizational systems. As enterprises increasingly integrate AI agents to automate tasks, ensuring proper identity management, access controls, and monitoring mechanisms for these non-human entities becomes critical to prevent unauthorized actions and potential breaches.
Kill Chain
