Evidence · DiggingBeagle record
Malbear Labs: Operation Snowball exposed agent offensive workspace
Original discovery of open-directory agent attack artifacts and transcript evidence.
- Published
- Nov 8, 2026
- Source role
- primary disclosure
Evidence record
Original discovery of open-directory agent attack artifacts and transcript evidence.
Claim-level citations (3)
- supportsOperation Snowball exposed attacker agent transcripts from a telecom intrusion campaign: The investigators describe an exposed directory of approximately 70 agent sessions and associated tooling targeting a telecom provider and hosted organizations.
Introduction, workspace exposure and transcript corpus
- supportsOperation Snowball exposed attacker agent transcripts from a telecom intrusion campaign: The report separates operator direction, agent recommendations and independently observed target effects.
Investigation chronology and evidence caveats
- supportsOperation Snowball exposed attacker agent transcripts from a telecom intrusion campaign: Malbear Labs reports exposed agent session artifacts from a suspected intrusion, but the recovered workspace and agent summaries do not independently verify every claimed effect at target organizations.
Operation Snowball, exposed directories and evidence limitations