Army builds ECHOTRIBBLE to let AI agents hack adversary networks

The U.S. Army is building a software platform that would let autonomous AI agents hack into adversary networks, identify targets, and 'neutralize' them with little direct human control, according to documents reviewed by The Intercept. The program, codenamed ECHOTRIBBLE, is being run through Army Cyber Command's Cyber Fusion Innovation Center alongside ARCYBER and the Army Cyber Technology and Innovation Center, and remains in a whitepaper and assessment phase. A recent virtual event generated 65 whitepapers, of which five were advanced to presentations.

In ARCYBER's own language, the agents are designed to "autonomously navigate infrastructures" and perform "identifying and neutralizing identified threats/targets." Reporter Sam Biddle writes that the system would behave "almost like a computer worm, silently navigating a foreign network and hopping from device to device until it finds the Army's quarry," spinning up tailored versions of itself along the way and self-destructing after.

Outside experts quoted in the piece are blunt. "Given the known failure modes of the current AI paradigm, making autonomous AI systems with a mandate to 'neutralize threats' is incredibly dangerous," David Krueger, a University of Montreal professor, told the publication. Hyrum Anderson, chief executive of Abundant and a former Microsoft and U.S. government cybersecurity figure, framed it as a blast-radius problem: "The target may well be hit. But what path will it take?" he asked, raising the prospect of a U.S. water utility caught along the way. RAND behavioral scientist William Marcellino said the kind of contextual judgment the task would demand "is not something that current public AI technology has."

The piece also catalogues autonomous agents that have already strayed off-script in civilian settings — breaking into Australian government systems, breaching Hugging Face infrastructure, uploading malicious software to RubyGems, and attempting to hack the U.S. Education Department — without being told to attack. Two of the researchers we track had the story in circulation the morning it ran.