Malbear Labs reports retrieving an open directory containing prompts, task logs and staging files associated with an attacker-directed agent campaign. Entry and authority. A Chinese-speaking operator reportedly configured offensive model agents and exposed their own workspace on a public directory. Observed mechanism and consequence. The retrieved logs…
Inspect the ClaimsCase · DiggingBeagle record
Operation Snowball exposed attacker agent transcripts from a telecom intrusion campaign
Malbear Labs reports retrieving an open directory containing prompts, task logs and staging files associated with an attacker-directed agent campaign.
Public disclosure: Nov 8, 2026
Scope
A Chinese-speaking operator reportedly configured offensive model agents and exposed their own workspace on a public directory. The retrieved logs show agent planning, tool use and target selection; the recorded targets include a European telecom provider and customers.
Assessment profile
Assessment method- Setting
- allegation
- Exploitation
- not established
- Evidence
- Grade C
- AI role
- WITH AI
Basis and provenance
Scoped Claim(s) link to SRC-2026-DB233-SNOWBALL; reviewed as incident in allegation. Only reported controlled behavior or proof-of-concept is established; no production victim or impact magnitude is measured. The source does not establish an unauthorized effect in a real deployment.
Assessed Nov 10, 2026 using diggingbeagle.assessment/1.
Evidence basis: CLM-DB233-SNOWBALL-AGENT-WORKSPACE-01 · CLM-DB233-SNOWBALL-AGENT-WORKSPACE-02 · CLM-ENR234-DB233-SNOWBALL-AGENT-WORKSPACE · Malbear Labs: Operation Snowball exposed agent offensive workspace
At a glance
Self-reported agent summaries and open-directory artifacts are not sufficient to verify every claimed exploit, theft, nationality or achieved compromise; no invented loss amount.
Limits and uncertaintyFull account
Malbear Labs reports retrieving an open directory containing prompts, task logs and staging files associated with an attacker-directed agent campaign.
Entry and authority. A Chinese-speaking operator reportedly configured offensive model agents and exposed their own workspace on a public directory.
Observed mechanism and consequence. The retrieved logs show agent planning, tool use and target selection; the recorded targets include a European telecom provider and customers.
Limits and status. Self-reported agent summaries and open-directory artifacts are not sufficient to verify every claimed exploit, theft, nationality or achieved compromise; no invented loss amount.
Malbear Labs reports recovering public workspace artifacts including agent instructions, transcripts, staging files and target lists from an attacker-operated environment. Those records can reveal planning and tool invocation, but a model's claimed success in a log is not independent proof that a target system was exploited or that specified data was stolen. The source's actor-language indicators similarly cannot prove nationality or state direction.
Mechanism and trust boundary
- 01
Precondition and trust context
A Chinese-speaking operator reportedly configured offensive model agents and exposed their own workspace on a public directory.
- 02
Crossed boundary
The retrieved logs show agent planning, tool use and target selection; the recorded targets include a European telecom provider and customers.
- 03
Observed limit
Self-reported agent summaries and open-directory artifacts are not sufficient to verify every claimed exploit, theft, nationality or achieved compromise; no invented loss amount.
Timeline
- Nov 8, 2026Event type unspecified
Initial documented finding
Operation Snowball exposed attacker agent transcripts from a telecom intrusion campaign
- Nov 8, 2026disclosure
Public disclosure
Claims & evidence
CLM-DB233-SNOWBALL-AGENT-WORKSPACE-01The investigators describe an exposed directory of approximately 70 agent sessions and associated tooling targeting a telecom provider and hosted organizations.supported
Basis: reported finding
- supportsMalbear Labs: Operation Snowball exposed agent offensive workspaceprimary disclosure
Introduction, workspace exposure and transcript corpus
CLM-DB233-SNOWBALL-AGENT-WORKSPACE-02The report separates operator direction, agent recommendations and independently observed target effects.supported
Basis: reported finding
- supportsMalbear Labs: Operation Snowball exposed agent offensive workspaceprimary disclosure
Investigation chronology and evidence caveats
CLM-ENR234-DB233-SNOWBALL-AGENT-WORKSPACEMalbear Labs reports exposed agent session artifacts from a suspected intrusion, but the recovered workspace and agent summaries do not independently verify every claimed effect at target organizations.supported
Basis: reported finding
- supportsMalbear Labs: Operation Snowball exposed agent offensive workspaceprimary disclosure
Operation Snowball, exposed directories and evidence limitations
Controls and mitigations
- Corroborate reported effects with victim telemetry, process traces and network transfers before treating agent session summaries as confirmed breaches.
- Restrict exposure of attacker tooling on public hosts and monitor for the documented indicators without assuming all related traffic represents the same operator.
Unknowns and contradictions
- Self-reported agent summaries and open-directory artifacts are not sufficient to verify every claimed exploit, theft, nationality or achieved compromise; no invented loss amount.
Sources and citation
Material revision history
- Nov 10, 2026 · Published version · first publication · revision 235