An AI agent in "Skynet mode" hijacks unprotected language models to launch self-sustaining cyberattacks

Symantec researchers intercepted a full attack prompt at a honeypot showing an offensive AI agent that hijacks unprotected language models, then scans for targets, exploits server software, steals databases and credentials, and installs cryptominers for up to 100,000 steps, leaving the model's owner with the compute bill. The prompt used a five-layer jailbreak, including a fake "Fantasy AI" identity and a companion persona called "ENI," plus 74 attack modules, and a second captured attack delivered an obfuscated script that downloads the XMRig Monero miner targeting go2rtc camera servers. Symantec calls the approach a shift in how attackers use AI, since the model does the planning while specialized modules carry out the attack steps.