/
ttps_attack:T1595 × criticity:high × limpar

Resultados

4 casos · pág. 1/1

infosecurity-magazine.com · high

Symantec uncovers autonomous AI attack agent hijacking exposed LLM endpoints (LLMjacking) to scan, exploit, steal credentials and mine Monero

Symantec's Threat Hunter Team used an AI honeypot to capture the full instruction set of a malicious autonomous AI agent in summer 2026. The agent is designed to run up to 100,000 malicious actions without human approval: scanning for targets, exploiting vulnerabilities, stealing credentials, deploying cryptocurrency miners and reinfectin…

recordedfuture.com · high

TAG-217 used AI-assisted ARTEX framework against South Korean banks, with crypto-theft, Linux and mobile tooling found as early as August 2026

Recorded Future's Insikt Group tracks the actor behind the October 2026 AI-assisted intrusions into South Korean financial institutions as TAG-217. The group was testing infrastructure and assembling attack tools as early as August 2026, weeks before the campaign became public. South Korea's Financial Services Commission (FSC) disclosed t…

gbhackers.com · high

TAG-217 used Claude Code, DeepSeek, Grok and ARTEX in AI-assisted preparation linked to South Korean bank breaches

Recorded Future's Insikt Group (report of October 16) tracks a suspected Chinese-speaking actor, TAG-217, linked to attacks on South Korean financial institutions. The actor used Claude Code, DeepSeek, Grok and Zhipu AI alongside ARTEX, an open-source Chinese-language AI penetration testing framework. Public reporting cited in the investi…

cisa.gov · high

LAUNDRY BEAR exploits Zimbra CVE-2025-66376 (zero-day since July 2025) to exfiltrate email from Western organizations

A multinational advisory (CISA, NSA, FBI, AIVD, MIVD, NCSC-UK and others) warns that the Russian state-supported APT LAUNDRY BEAR (aka Void Blizzard, TA488) has compromised Western government, defense industrial base and NGO organizations running Zimbra Collaboration Suite (ZCS) since at least July 2025. The campaign uses a view-based XSS…