[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fNBEkp_eS8X1XexPrjrYOpNFTEXEQCXeQ6dh3CB5Qtj0":3},{"article":4,"iocs":47,"watch_terms":48,"solutions":49,"lesson":136},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":24,"category":25,"article_tags":29},"894ea8a3-1d58-4fa8-a929-1ff939493126","Bots pose as AI agents, AI agents pose as humans, and defenses believe both","bots-pose-as-ai-agents-ai-agents-pose-as-humans-and-defenses-believe-both-6edf3d","Over one week in October, an online marketplace took 414,210 visits from traffic wearing the name of a widely used consumer AI agent. Every visit went for the sign-in page, and every one returned errors. Behind the name was a credential stuffing operation, with attackers running stolen username and password pairs against the site in bulk. The fake agent was busier than the real ones. Its volume came to about one and a half times … More → The post Bots pose as AI agents, AI agents pose as humans, and defenses believe both appeared first on Help Net Security.","Attackers are using bots to impersonate widely used AI agents and even humans, leading to credential stuffing operations and unauthorized access. One marketplace saw over 414,000 visits from a fake AI agent targeting its sign-in page. Another campaign involved automated traffic posing as a desktop browser, which successfully bypassed multi-factor authentication and engaged in account management activities before being identified by a browser update.","Bots impersonate AI agents and humans, leading to credential stuffing and account takeover attempts.","https:\u002F\u002Fwww.helpnetsecurity.com\u002F2026\u002F11\u002F12\u002Fbots-ai-agent-impersonation\u002F","https:\u002F\u002Fimg.helpnetsecurity.com\u002Fwp-content\u002Fuploads\u002F2026\u002F09\u002F22085447\u002Fbots-army-1500.webp","2026-11-12T05:00:59+00:00","2026-11-12T06:00:09.127858+00:00",7,[17,20,22],{"name":18,"type":19},"AI agents","technology",{"name":21,"type":19},"browser",{"name":23,"type":19},"multi-factor authentication","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":24,"icon":26,"name":27,"slug":28},null,"Threat Intelligence","threat-intelligence",[30,35,40,45],{"category":31},{"id":32,"icon":26,"name":33,"slug":34},"02371804-cf6d-4449-98de-f1a2d4d9b266","Tools","tools",{"category":36},{"id":37,"icon":26,"name":38,"slug":39},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":41},{"id":42,"icon":26,"name":43,"slug":44},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":46},{"id":24,"icon":26,"name":27,"slug":28},[],[],{"controls":50,"vendors":135},[51,80,106],{"slug":52,"name":53,"problem":54,"products":55},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",[56,64,72],{"vendor_slug":57,"vendor_name":58,"vendor_logo":59,"product_slug":60,"product_name":61,"url":62,"description":63},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","duo","Cisco Duo","https:\u002F\u002Fduo.com\u002F","MFA and device trust, with support for passkeys and security keys.",{"vendor_slug":65,"vendor_name":66,"vendor_logo":67,"product_slug":68,"product_name":69,"url":70,"description":71},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","entra-id","Microsoft Entra ID","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fidentity-access\u002Fmicrosoft-entra-id","Cloud identity and access management with single sign-on, conditional access, passkeys and identity governance.",{"vendor_slug":73,"vendor_name":74,"vendor_logo":75,"product_slug":76,"product_name":77,"url":78,"description":79},"yubico","Yubico","\u002Fvendor-logos\u002Fyubico.png","yubikey","YubiKey","https:\u002F\u002Fwww.yubico.com\u002Fproducts\u002F","Hardware security keys for FIDO2, passkeys and smart card login, in USB and NFC versions.",{"slug":81,"name":82,"problem":83,"products":84},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[85,93,98],{"vendor_slug":86,"vendor_name":87,"vendor_logo":88,"product_slug":89,"product_name":90,"url":91,"description":92},"vectra-ai","Vectra AI","\u002Fvendor-logos\u002Fvectra-ai.png","vectra-ai-platform","Vectra AI Platform","https:\u002F\u002Fwww.vectra.ai\u002Fplatform","Detection of attacker behaviour across network, identity and cloud.",{"vendor_slug":65,"vendor_name":66,"vendor_logo":67,"product_slug":94,"product_name":95,"url":96,"description":97},"defender-for-identity","Microsoft Defender for Identity","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fsiem-and-xdr\u002Fmicrosoft-defender-for-identity","Detects attacks against on-premises Active Directory and hybrid identities.",{"vendor_slug":99,"vendor_name":100,"vendor_logo":101,"product_slug":102,"product_name":103,"url":104,"description":105},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","identity-threat-protection","Okta Identity Threat Protection","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fidentity-threat-protection\u002F","Continuous risk assessment of sessions after login, with automatic actions such as ending sessions.",{"slug":107,"name":108,"problem":109,"products":110},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[111,119,127],{"vendor_slug":112,"vendor_name":113,"vendor_logo":114,"product_slug":115,"product_name":116,"url":117,"description":118},"sentinelone","SentinelOne","\u002Fvendor-logos\u002Fsentinelone.png","singularity-endpoint","Singularity Endpoint","https:\u002F\u002Fwww.sentinelone.com\u002Fplatform\u002Fendpoint-security\u002F","Endpoint protection and detection with automated response and rollback.",{"vendor_slug":120,"vendor_name":121,"vendor_logo":122,"product_slug":123,"product_name":124,"url":125,"description":126},"sophos","Sophos","\u002Fvendor-logos\u002Fsophos.png","sophos-endpoint","Sophos Endpoint","https:\u002F\u002Fwww.sophos.com\u002Fen-us\u002Fproducts\u002Fendpoint-security","Endpoint protection with Intercept X anti-ransomware technology and EDR.",{"vendor_slug":128,"vendor_name":129,"vendor_logo":130,"product_slug":131,"product_name":132,"url":133,"description":134},"bitdefender","Bitdefender","\u002Fvendor-logos\u002Fbitdefender.png","gravityzone","GravityZone","https:\u002F\u002Fwww.bitdefender.com\u002Fen-us\u002Fbusiness\u002Fgravityzone-platform\u002F","Endpoint protection, detection and response platform.",[],{"slug":137,"title":138,"body":139,"framework_refs":140,"framework_notes":146},"bot-impersonation-of-ai-agents-bypasses-mfa-and-floods-sign-in-pages","Bot Impersonation of AI Agents Bypasses MFA and Floods Sign-In Pages","Attackers are deploying sophisticated bots that masquerade as legitimate AI agents and human browser sessions, enabling large-scale credential stuffing and unauthorized account access. One marketplace recorded over 414,000 fraudulent visits to its sign-in page from a single fake AI agent, while another campaign successfully bypassed multi-factor authentication by mimicking desktop browser traffic. This matters because organizations increasingly trust AI agent traffic as benign, and attackers are exploiting that implicit trust to slip past both MFA and bot-detection controls. Without robust bot fingerprinting, behavioral analytics, and anomaly detection on authentication flows, defenders have no reliable way to distinguish legitimate automated agents from malicious imposters.",[141,142,143,144,145],"MITRE ATT&CK T1078: Valid Accounts","MITRE ATT&CK T1110.004: Credential Stuffing","NIS2 Article 21(2)(j)","NIST SP 800-53 IA-3: Device Identification and Authentication","CIS Control 8: Audit Log Management (v8)",{"NIS2 Article 21(2)(j)":147,"MITRE ATT&CK T1078: Valid Accounts":148,"CIS Control 8: Audit Log Management (v8)":149,"MITRE ATT&CK T1110.004: Credential Stuffing":150,"NIST SP 800-53 IA-3: Device Identification and Authentication":151},"This point requires multi-factor authentication and secured communications; the incident shows MFA was bypassed by bots mimicking browser sessions, highlighting the need for stronger, automation-resistant MFA implementations.","Attackers used credential stuffing with bot-impersonation to gain unauthorized access using valid user credentials, which is precisely what this technique describes.","Comprehensive and centralized authentication logs with behavioral context are what allowed eventual identification of the malicious automated campaign, and this control mandates exactly that level of logging and review.","The 414,000-visit campaign against the sign-in page is a textbook credential stuffing attack, where automated bots try stolen credential pairs at scale.","This control requires systems to uniquely identify and authenticate devices before allowing connections, which would have helped detect and block bots falsely posing as legitimate AI agents or browsers."]