Microsoft Reports Attackers Using Agentic AI to Scan GitHub for Leaked Credentials, Exfiltrating Data from Azure Key Vault in 5 Minutes

Microsoft Threat Intelligence Center (MSTIC) reported observing attackers using agentic AI tools to mass-scan public GitHub repositories for leaked application credentials and other sensitive data. Upon finding valid Service Principal credentials, attackers use them to log into corporate Microsoft Entra ID tenants and access Azure resources. In one case, an AI agent moved from searching for secrets to exfiltrating data from Azure Key Vault in just 5 minutes.

Unlike traditional automation scripts, these AI agents can dynamically adjust their next steps based on operational results. For example, if an API call fails, the agent attempts alternative methods. This adaptability makes such attacks harder to detect with fixed signatures. Microsoft noted that this activity has been observed since August, with multiple successful intrusions confirmed in late October.

This finding underscores the critical importance of managing application credentials and cloud workload identities. Researchers warn that any publicly exposed credential should be considered compromised, even if the associated code has been deleted from GitHub; the credential itself remains valid. Enterprises must revoke or rotate these credentials and audit their past usage. Additionally, organizations should monitor for anomalous cloud login behaviors, such as repeated login attempts in short intervals, rapid access to multiple services by the same application, and quick retries after API failures, analyzing these alongside authentication logs rather than relying solely on IP blocklists.