Chainalysis Breach Exposes All Users' Credentials, Forces Shutdown of Key Services

Chainalysis disclosed a breach resulting from an 'agentic' cyber attack that exposed user credentials, including password hashes and live tokens, prompting the shutdown of key services like Reactor and KYT. The attack is linked to a broader campaign involving AI-driven tools such as ARTEX, which scan GitHub for exposed secrets and conduct rapid follow-on attacks. Microsoft attributes similar activity to threat actors using autonomous agents to exploit valid credentials and target AI/ML services across Azure environments. Suspicious IP addresses and domains tied to LLM token abuse and resale operations have been identified, including infrastructure linked to llm-routing[.]com and xingjiabiapi[.]org.

AI-extracted · verify before operational use