Google Report Confirms AI Cyberattacks Are Now Fully Autonomous, With Hackers Completing Mass Credential Theft in Under Six Hours

Google's Threat Intelligence Group confirms AI-powered cyberattacks have gone fully autonomous, with multi-agent frameworks now executing mass credential theft in under six hours, targeting everything from cloud infrastructure to social engineering across the entire attack lifecycle.

• Google's Threat Intelligence Group Q3 report reveals that AI-enabled cyberattacks have shifted from assisted to fully automated, with multi-agent frameworks now autonomously executing attacks, including a mass-credential harvesting operation completed in under six hours.
• Threat actors are leveraging autonomous AI across the full attack lifecycle, targeting reconnaissance, social engineering, malware obfuscation, and proprietary AI intellectual property, while also stealing developer credentials and infiltrating cloud infrastructure.
• Cybersecurity defenders are being urged to adopt a two-pronged response strategy, combining AI-powered threat detection with creative defensive measures like cost-inflating attack deterrents, as autonomous, agent-driven cyberattacks are now a confirmed reality.