AI Agent Impersonation

AI agent impersonation refers to attacks in which a malicious party poses as a legitimate AI agent, or tricks other systems and people into treating an attacker-controlled agent as trusted. Because AI agents often act on behalf of employees and can send messages, approve requests, or access data, a convincing impostor can trigger real business actions without any human noticing the substitution. For compliance and risk teams, this raises questions about how agent identities are issued, verified, and revoked, and whether audit logs can reliably show which agent actually took an action.

1 item

ResearchGlobal2026-10-29

Fake AI Crawlers From 32 Spoofed Identities Targeted Enterprise Credentials

Researchers at Cequence Security documented a single threat actor cycling through approximately 32 fabricated AI bot identities to scan enterprise web servers for credentials, SSH keys, and cloud secrets. The campaign impersonated crawlers attributed to OpenAI, Anthropic, Meta, and Perplexity, targeting roughly 90 sensitive file paths. Using more than 300 cloud addresses in a single day, the attacker rendered static IP-blocklist defenses ineffective.

AI agent impersonation credential exposure bot identity verification OpenAI Anthropic Meta AI access controls zero trust