CL-STA-1238: Chinese-speaking actors use AI pentest framework Cairn to run 25 intrusions against 19+ organizations, breaching 10
Matéria consolidada. Reúne 2 matérias que o Tifon tinha publicado separadamente sobre a mesma história. A IA reescreveu o relatório com o que as 2 fontes trouxeram em 13/11/2026 00:01; os links antigos trazem para cá.
Between August and September 2026, Unit 42 (Palo Alto Networks) tracked a China-nexus intelligence-collection campaign, CL-STA-1238, in which attackers used the open-source AI penetration-testing framework Cairn to run intrusions autonomously. The operation comprised 25 attempts against at least 19 organizations in semiconductor and advanced manufacturing supply chains, defense and defense policy, and human rights and civil society (unit42.paloaltonetworks.com, helpnetsecurity.com). Ten organizations suffered unauthorized access or data exfiltration. Impact included more than one million personal records leaked, including at a U.S. teachers' union (helpnetsecurity.com), military and government identities retrieved, and persistent administrator access created (unit42.paloaltonetworks.com). Unit 42 assesses the activity was likely carried out by a single operator or a small team (helpnetsecurity.com). It presents the campaign as a new paradigm of AI-driven autonomous attacks in which automation increased volume and coverage, not sophistication.
Detalhes técnicos
- Tooling: The actors used a customized fork of Cairn with an added skill pack (unit42.paloaltonetworks.com), hosted on a Hong Kong server (helpnetsecurity.com). Cairn autonomously planned and executed multi-stage attacks.
- AI models: Zhipu GLM and DeepSeek models, reported as GLM 5.2 and DeepSeek V4 variants, were configured with minimal prompts (helpnetsecurity.com).
- Techniques: The attackers used credential theft, weak-password spraying, credential brute forcing, authentication bypasses, exposed cloud APIs, default credentials, and insecure cloud storage and endpoints. These are classic identity and configuration weaknesses, not novel exploits.
- Duration: Individual operations ranged from 20 minutes to more than 50 hours (helpnetsecurity.com).
- Indicators: Cairn server in Hong Kong: 154.44.31.4. U.S. staging node: 82.29.129.54 (helpnetsecurity.com).
Remediação
- Strengthen identity hygiene: eliminate default and weak credentials, and defend against password spraying and brute forcing.
- Reduce the attack surface by locking down exposed cloud APIs, storage and endpoints.
- Patch known vulnerabilities promptly (unit42.paloaltonetworks.com).
- Hunt for and block the two IPs listed above.
- Palo Alto Networks says its security products protect customers against this activity (unit42.paloaltonetworks.com).
Linha do tempo
-
Chinese-speaking actors use autonomous AI framework Cairn for 25 cyber operations against 19 organizations, breaching 10
ler a análise desta fonte ocultar
Palo Alto Networks’ Unit 42 discovered a campaign in August-September 2026 where Chinese-speaking attackers used Cairn, an open-source AI penetration testing framework, customized and hosted on a Hong Kong server, to autonomously conduct 25 intrusion attempts against at least 19 organizations. Of these, 10 suffered unauthorized access or data exfiltration. Target sectors included semiconductor and advanced manufacturing supply chains, defense and defense policy, and human rights and civil society. The attackers leveraged AI models Zhipu GLM 5.2 and DeepSeek V4 variants configured with minimal prompts, combined with classic weaknesses such as authentication bypasses, exposed cloud APIs, and default credentials. Individual attack durations ranged from 20 minutes to over 50 hours, demonstrating how automation increased attack volume and coverage rather than complexity. Credential theft, password spraying, brute forcing, and exploitation of insecure cloud storage and endpoints enabled extensive data access, including over a million records at a U.S. teachers’ union. Indicators include a Hong Kong Cairn server IP 154.44.31.4 and a U.S. staging node 82.29.129.54. Unit 42 assesses these operations as China-nexus intelligence collection under tracking code CL-STA-1238, carried out likely by a single operator or small team.
-
Chinese-speaking attackers use autonomous AI framework Cairn for espionage against semiconductor, defense, and civil society sectors
ler a análise desta fonte ocultar
Between August and September 2026, attackers linked to China-nexus intelligence campaign CL-STA-1238 used the open-source AI penetration testing framework Cairn, paired with Chinese AI models Zhipu GLM and DeepSeek, to autonomously conduct 25 operations targeting at least 19 organizations across semiconductor manufacturing, defense, and civil society sectors. Cairn autonomously planned and executed complex multi-stage attacks, achieving unauthorized access and data retrieval at 10 organizations, including leaking over one million personal records, retrieving military and government identities, and creating persistent administrator access. The attackers used a customized fork of Cairn with an added skill pack, employed weak-password spraying, credential brute forcing, and exploited identity and configuration weaknesses. This campaign illustrates a new paradigm in AI-driven autonomous attacks, emphasizing the importance of strong identity hygiene, attack surface reduction, and patching against known vulnerabilities. Palo Alto Networks offers multiple security solutions to protect customers from such threats.