Hackers Use Autonomous AI Agents to Harvest Thousands of Credentials in Under 6 Hours