/
attack_type:webshell × victim_sectors:manufacturing × limpar

Resultados

2 casos · pág. 1/1

gbhackers.com · high

Chinese-speaking operator uses Cairn-based autonomous AI agents to breach 100+ e-commerce websites in AIA0001 campaign

A Chinese-speaking operator used autonomous AI agents on the open-source Cairn platform to compromise the websites of more than 100 companies. NorForge tracks the most active campaign as AIA0001: over 1,100 attack projects across 14 dashboards, and more than 1,200 break-in attempts overall. Targets were e-commerce businesses in the United…

AIA0001 e-commerce retail
greynoise.io · critical

Chinese-speaking actor tied to Red Heron exploits WordPress wp2shell, ZyXEL GS1900 CVE-2026-7273 and Ubiquiti; steals 18,000+ government records

GreyNoise reports that a single malicious cyber actor, tracked since 7 May 2026, is a suspected Chinese speaker working in UTC+8 and is the same as or related to Red Heron (reported by Acronis), based on the shared C2 domain, malware family, Gitea exploitation and other TTPs. The actor exploited the wp2shell WordPress chain (CVE-2026-6303…

CVE-2026-7273 CVE-2026-34908 CVE-2026-34909 Red Heron government law enforcement