Chinese-speaking actors use autonomous AI framework Cairn for 25 cyber operations against 19 organizations, breaching 10
Palo Alto Networks’ Unit 42 discovered a campaign in August-September 2026 where Chinese-speaking attackers used Cairn, an open-source AI penetration testing framework, customized and hosted on a Hong Kong server, to autonomously conduct 25 intrusion attempts against at least 19 organizations. Of these, 10 suffered unauthorized access or data exfiltration. Target sectors included semiconductor and advanced manufacturing supply chains, defense and defense policy, and human rights and civil society. The attackers leveraged AI models Zhipu GLM 5.2 and DeepSeek V4 variants configured with minimal prompts, combined with classic weaknesses such as authentication bypasses, exposed cloud APIs, and default credentials. Individual attack durations ranged from 20 minutes to over 50 hours, demonstrating how automation increased attack volume and coverage rather than complexity. Credential theft, password spraying, brute forcing, and exploitation of insecure cloud storage and endpoints enabled extensive data access, including over a million records at a U.S. teachers’ union. Indicators include a Hong Kong Cairn server IP 154.44.31.4 and a U.S. staging node 82.29.129.54. Unit 42 assesses these operations as China-nexus intelligence collection under tracking code CL-STA-1238, carried out likely by a single operator or small team.
Linha do tempo
-
Chinese-speaking actors use autonomous AI framework Cairn for 25 cyber operations against 19 organizations, breaching 10
ler a análise desta fonte ocultar
Palo Alto Networks’ Unit 42 discovered a campaign in August-September 2026 where Chinese-speaking attackers used Cairn, an open-source AI penetration testing framework, customized and hosted on a Hong Kong server, to autonomously conduct 25 intrusion attempts against at least 19 organizations. Of these, 10 suffered unauthorized access or data exfiltration. Target sectors included semiconductor and advanced manufacturing supply chains, defense and defense policy, and human rights and civil society. The attackers leveraged AI models Zhipu GLM 5.2 and DeepSeek V4 variants configured with minimal prompts, combined with classic weaknesses such as authentication bypasses, exposed cloud APIs, and default credentials. Individual attack durations ranged from 20 minutes to over 50 hours, demonstrating how automation increased attack volume and coverage rather than complexity. Credential theft, password spraying, brute forcing, and exploitation of insecure cloud storage and endpoints enabled extensive data access, including over a million records at a U.S. teachers’ union. Indicators include a Hong Kong Cairn server IP 154.44.31.4 and a U.S. staging node 82.29.129.54. Unit 42 assesses these operations as China-nexus intelligence collection under tracking code CL-STA-1238, carried out likely by a single operator or small team.