A Honeypot Caught an Agent That Rents Your Model to Break Things

Attackers built an agent that does not need its own infrastructure. It borrows yours.

• Symantec’s honeypot logged more than 127,000 requests in one summer, from tens of thousands of addresses, almost all of them hunting open model endpoints and sprayed API keys.
• The captured prompt carried 74 offensive tools, five jailbreak layers, and Skynet mode, which authorized 100,000 steps with no human approval in the loop.
• The economics create two victims. The endpoint owner pays for the inference, and any host the agent breaks into loses data and runs a miner under /tmp/.x.
• None of it is novel. The assembly is the news. One agent now hands the planning to a borrowed model and runs the rest itself.
• Symantec found no evidence of use against a real target, and the task attached to the captured prompt was a harmless coding challenge.

Every control on its fix list is a setting. Authenticate health checks and model listing paths. Put a gateway in front of the listener. Restrict what an agent can reach on the network. Read the full analysis.