AutoJack MCP Shell Injection: Suspicious Child Process from autogenstudio

Ibrahim Saud@tektrix

•updated Jun 28, 2026•0•0•0

Detects common system binaries and command-line tools spawned by or from a parent context containing 'autogenstudio'. This behavior may indicate an attacker leveraging the AutoGenStudio framework for post-exploitation, reconnaissance, or command execution.