BUGSTER actor uses jailbroken Hermes Agent and DeepSeek V4 for credential theft, VoIP fraud planning and Wi-Fi cracking, hitting Indian universities
Unit 42 analyzed the operational environment of a previously unreported, financially motivated, English-speaking actor using the handle BUGSTER. The actor ran the Hermes Agent framework with DeepSeek V4 as its reasoning engine and the Cursor IDE as a secondary tool, with safety controls disabled in both. With AI-generated scripts and reco…