/
← Voltar ao feed
critical exploit público industrial manufacturing energy healthcare pharmaceutical

Russian-Speaking INC and The Gentlemen Ransomware Affiliates Use Phantom AI Agent Framework to Breach 62 Organizations

1 fonte(s) · 1 atualização(ões) · publicado 23/10/2026 14:50 · coletado há 4 horas

SOCRadar researchers analyzed an exposed directory at 45.227.254[.]43 that revealed an AI-driven intrusion ecosystem run by affiliates of the INC and The Gentlemen ransomware groups. It is centered on an "Autonomous Red Team Kill Chain Framework" called Phantom. The actor is assessed to be Russian-speaking and acts both as an intrusion and data-extortion operator and as an infrastructure provider for other ransomware partners. Intrusions are AI-executed but human-approved: an operator supplies a victim-specific prompt and reviews each step, while OpenCode with OpenRouter-hosted commercial models carries out the actions. An estimated 62 organizations were targeted, 4 of them listed on the INC and The Gentlemen leak sites. More than 50% of targets were in the U.S., mainly industrial, manufacturing and energy, followed by healthcare and pharmaceutical.

2 exploits públicos

Há código de exploração publicado no Exploit-DB para CVE-2026-9082, CVE-2026-41940. O código não é reproduzido aqui: o link leva à fonte, e a explicação foi escrita pela IA a partir do arquivo publicado.

  1. exploit-db.com · EDB-52608 ↗ · aplicação web · php · pub. 01/06/2026 não verificado

    Drupal Core 10.5.5 - Error-Based SQL Injection

    This script targets Drupal Core 10.5.5 running on PostgreSQL, abusing the JSON:API module's filter handling, where user-supplied array keys end up inside the SQL query. An unauthenticated remote attacker who can reach a site with JSON:API exposed could trigger database errors that leak data, such as the database version, in the error message. It is a short proof of concept that only demonstrates information disclosure through error-based injection, with no further exploitation. It was tested only in a local Docker setup and is not verified by Exploit-DB, but it appears to match the listed CVE.

    CVE-2026-9082 · autor: cardosource · explicação gerada por IA
  2. exploit-db.com · EDB-52574 ↗ · aplicação web · php · pub. 26/05/2026 não verificado

    cPanel - CRLF Injection

    The script abuses an authentication bypass in the cPanel/WHM daemon (cpsrvd), reachable over the network on the WHM admin port with no credentials. It sends an Authorization header with embedded line breaks plus a pre-login session cookie, which injects forged fields into the session file claiming root and passed two-factor. The server then issues a valid administrative session token, giving full WHM and root-level control. It is a working automated script, not verified by Exploit-DB; the 11.40 version in the title looks wrong.

    CVE-2026-41940 · autor: nu11secur1ty · explicação gerada por IA

Detalhes técnicos

  • Initial access: Mass exploitation of edge and remote-access systems, including FortiClient EMS, SimpleHelp, cPanel/WHM and VPN gateways (Ivanti, Citrix, SonicWall, OpenVPN).
  • CVEs, actively exploited: CVE-2024-57727 (SimpleHelp path traversal), CVE-2026-35616 (FortiClient authentication bypass), CVE-2026-41940 (cPanel/WHM authentication bypass).
  • CVEs, other: CVE-2026-15409 (SonicWall SMA 1000 SSRF) was staged for targeting with no confirmed compromise. CVE-2026-63030 (WordPress wp2shell) was developed. CVE-2026-42208 (LiteLLM SQL injection) and CVE-2026-9082 (Drupal SQL injection) were developed or referenced.
  • Post-exploitation: Operators enumerate the domain, escalate to domain admin, harvest credentials with stealer tooling, prioritize finance, HR, legal and executive files, and collect them over reverse-SOCKS tunnels. Credential reuse was the main force multiplier; in one case a single password unlocked the VPN, servers, RMM, backup and security management platforms.
  • Defense evasion: A BYOVD killer and loader-level evasion impaired security products, with mixed results against enterprise EDRs per the operators' own logs.
  • Toolkit:
    • Phantom has 18 skill modules and an agent that polls an external server for tasks.
    • WormGPT-MCP is a set of 32 MCP servers linking the AI to 32 modules, from reconnaissance to extortion.
    • Ghost C2 is polymorphic implants in three generations, communicating over Cloudflare, Telegram or DNS.
    • RevSocks is a reverse SOCKS5 pivoting and staging framework.
    • QuickLine is a Cloudflare-fronted Mythic agent.
    • A Quick Heal/Seqrite EDR killer abuses the Zemana driver zam64.sys.
    • rks3 and BackupAgent handle exfiltration.
  • AI use: The exposed logs record 8,257 messages across 133 sessions. When models refuse a prompt, the operator rewrites it as an authorized red team assessment rather than switching models. AI-managed knowledge bases track victims, stolen credentials and campaign status.
  • Extortion: AI-authored records show a data-centric approach: the victim's financials are assessed to set a ransom it can pay without involving a bank or insurer. Masked proof samples, scripted vishing calls and threats to notify customers, partners and regulators follow. Data is leaked after a 24-72 hour deadline. No wallet or payment record was recovered, so outcomes are unknown.

Remediação

  • Patch or mitigate the exploited FortiClient EMS, SimpleHelp and cPanel/WHM flaws, and review exposure of VPN gateways and remote-management servers.
  • Eliminate credential reuse across VPN, RMM, backup and security platforms.
  • Monitor for BYOVD activity such as loading of zam64.sys.
  • Hunt for reverse-SOCKS tunnels and Cloudflare, Telegram or DNS-based C2 traffic.

Linha do tempo

  1. thehackernews.com ↗ · pub. 23/10/2026 14:50 · coletado 23/10 15:00 primeiro registro

    Russian-Speaking INC and The Gentlemen Ransomware Affiliates Use Phantom AI Agent Framework to Breach 62 Organizations

    ler a análise desta fonte

    SOCRadar researchers analyzed an exposed directory at 45.227.254[.]43 that revealed an AI-driven intrusion ecosystem run by affiliates of the INC and The Gentlemen ransomware groups. It is centered on an "Autonomous Red Team Kill Chain Framework" called Phantom. The actor is assessed to be Russian-speaking and acts both as an intrusion and data-extortion operator and as an infrastructure provider for other ransomware partners. Intrusions are AI-executed but human-approved: an operator supplies a victim-specific prompt and reviews each step, while OpenCode with OpenRouter-hosted commercial models carries out the actions. An estimated 62 organizations were targeted, 4 of them listed on the INC and The Gentlemen leak sites. More than 50% of targets were in the U.S., mainly industrial, manufacturing and energy, followed by healthcare and pharmaceutical.

    Technical Details

    • Initial access: Mass exploitation of edge and remote-access systems, including FortiClient EMS, SimpleHelp, cPanel/WHM and VPN gateways (Ivanti, Citrix, SonicWall, OpenVPN).
    • CVEs, actively exploited: CVE-2024-57727 (SimpleHelp path traversal), CVE-2026-35616 (FortiClient authentication bypass), CVE-2026-41940 (cPanel/WHM authentication bypass).
    • CVEs, other: CVE-2026-15409 (SonicWall SMA 1000 SSRF) was staged for targeting with no confirmed compromise. CVE-2026-63030 (WordPress wp2shell) was developed. CVE-2026-42208 (LiteLLM SQL injection) and CVE-2026-9082 (Drupal SQL injection) were developed or referenced.
    • Post-exploitation: Operators enumerate the domain, escalate to domain admin, harvest credentials with stealer tooling, prioritize finance, HR, legal and executive files, and collect them over reverse-SOCKS tunnels. Credential reuse was the main force multiplier; in one case a single password unlocked the VPN, servers, RMM, backup and security management platforms.
    • Defense evasion: A BYOVD killer and loader-level evasion impaired security products, with mixed results against enterprise EDRs per the operators' own logs.
    • Toolkit:
      • Phantom has 18 skill modules and an agent that polls an external server for tasks.
      • WormGPT-MCP is a set of 32 MCP servers linking the AI to 32 modules, from reconnaissance to extortion.
      • Ghost C2 is polymorphic implants in three generations, communicating over Cloudflare, Telegram or DNS.
      • RevSocks is a reverse SOCKS5 pivoting and staging framework.
      • QuickLine is a Cloudflare-fronted Mythic agent.
      • A Quick Heal/Seqrite EDR killer abuses the Zemana driver zam64.sys.
      • rks3 and BackupAgent handle exfiltration.
    • AI use: The exposed logs record 8,257 messages across 133 sessions. When models refuse a prompt, the operator rewrites it as an authorized red team assessment rather than switching models. AI-managed knowledge bases track victims, stolen credentials and campaign status.
    • Extortion: AI-authored records show a data-centric approach: the victim's financials are assessed to set a ransom it can pay without involving a bank or insurer. Masked proof samples, scripted vishing calls and threats to notify customers, partners and regulators follow. Data is leaked after a 24-72 hour deadline. No wallet or payment record was recovered, so outcomes are unknown.

    Remediation

    • Patch or mitigate the exploited FortiClient EMS, SimpleHelp and cPanel/WHM flaws, and review exposure of VPN gateways and remote-management servers.
    • Eliminate credential reuse across VPN, RMM, backup and security platforms.
    • Monitor for BYOVD activity such as loading of zam64.sys.
    • Hunt for reverse-SOCKS tunnels and Cloudflare, Telegram or DNS-based C2 traffic.