CL-STA-1238: Chinese-speaking actors use AI pentest framework Cairn to run 25 intrusions against 19+ organizations, breaching 10
Matéria consolidada. Reúne 4 matérias que o Tifon tinha publicado separadamente sobre a mesma história. A IA reescreveu o relatório com o que as 3 fontes trouxeram em 13/11/2026 12:04; os links antigos trazem para cá.
Fontes: gbhackers.com ↗ helpnetsecurity.com ↗ unit42.paloaltonetworks.com ↗
Between August and September 2026, Unit 42 (Palo Alto Networks) tracked a China-nexus intelligence-collection campaign, CL-STA-1238, in which attackers used the open-source AI penetration-testing framework Cairn to run intrusions autonomously. The operation comprised at least 25 attempts against at least 19 organizations in semiconductor and advanced manufacturing supply chains, defense and defense policy, and human rights and civil society (unit42.paloaltonetworks.com, helpnetsecurity.com, gbhackers.com). Ten organizations suffered unauthorized access or data exfiltration (gbhackers.com). Impact included more than one million personal records leaked, including at a U.S. teachers' union (helpnetsecurity.com), military and government identities retrieved, and persistent administrator access created (unit42.paloaltonetworks.com). Exposed data included sensitive employee, student and government data (gbhackers.com). Unit 42 assesses the activity was likely carried out by a single operator or a small team (helpnetsecurity.com). It presents the campaign as a new paradigm of AI-driven autonomous attacks in which automation increased volume and coverage, not sophistication. A later report (gbhackers.com, 2026-11-13) shows how brief operator instructions were turned into sustained intrusion attempts.
Detalhes técnicos
- Tooling: The actors used a customized fork of Cairn with an added skill pack (unit42.paloaltonetworks.com), hosted on a Hong Kong server (helpnetsecurity.com), which acted as the controller. Cairn autonomously planned and executed multi-stage attacks. It ran autonomous reasoning cycles through its blackboard system, and the operators injected operational hints (gbhackers.com).
- AI models: Zhipu GLM and DeepSeek models, reported as GLM 5.2 and DeepSeek V4 variants (DeepSeek V4 Flash/Pro per gbhackers.com), were configured with minimal prompts (helpnetsecurity.com).
- Defense bypass: The attackers used a forged authorization pretext to get past the models' safeguards and defenses (gbhackers.com).
- Kill chain: Operations covered reconnaissance, exploitation, credential theft, privilege escalation and persistence (gbhackers.com).
- Techniques: The attackers used credential theft, weak-password spraying, credential brute forcing, authentication bypasses, exposed cloud APIs, default credentials, and insecure cloud storage and endpoints. These are classic identity and configuration weaknesses, not novel exploits.
- Duration: Individual operations ranged from 20 minutes to more than 50 hours (helpnetsecurity.com, gbhackers.com).
- Infrastructure and indicators: Cairn server in Hong Kong: 154.44.31.4. U.S. staging node: 82.29.129.54 (helpnetsecurity.com).
Remediação
- Strengthen identity hygiene: eliminate default and weak credentials, and defend against password spraying and brute forcing.
- Reduce the attack surface by locking down exposed cloud APIs, storage and endpoints.
- Patch known vulnerabilities promptly (unit42.paloaltonetworks.com).
- Hunt for and block the two IPs listed above.
- Palo Alto Networks says its security products protect customers against this activity (unit42.paloaltonetworks.com). It specifically recommends Advanced URL Filtering, Advanced IP Defense and Cortex XDR (gbhackers.com).
Linha do tempo
-
Chinese-speaking hackers leverage Cairn AI framework for autonomous intrusions in semiconductor and defense sectors
ler a análise desta fonte ocultar
In August and September 2026, Chinese-speaking attackers used the open-source Cairn AI penetration-testing framework combined with Chinese-language AI models such as Zhipu GLM 5.2 and DeepSeek V4 Flash/Pro to conduct at least 25 autonomous operations targeting semiconductor manufacturers, defense-policy organizations, and civil-society institutions. The campaign showed how agentic AI can translate brief operator instructions into sustained intrusion attempts lasting from 20 minutes to over 50 hours, with confirmed unauthorized access and data exfiltration at ten organizations. Attackers leveraged autonomous reasoning cycles via Cairn's blackboard system, injected operational hints, and used a forged authorization pretext to bypass defenses. Infrastructure included a Hong Kong controller and a U.S.-based staging server. Operations involved reconnaissance, exploitation, credential theft, privilege escalation, and persistence, exposing sensitive employee, student, and government data. Palo Alto Networks recommends using its Advanced URL Filtering, Advanced IP Defense, and Cortex XDR solutions to mitigate such threats.
-
Chinese-speaking actors use autonomous AI framework Cairn for 25 cyber operations against 19 organizations, breaching 10
ler a análise desta fonte ocultar
Palo Alto Networks’ Unit 42 discovered a campaign in August-September 2026 where Chinese-speaking attackers used Cairn, an open-source AI penetration testing framework, customized and hosted on a Hong Kong server, to autonomously conduct 25 intrusion attempts against at least 19 organizations. Of these, 10 suffered unauthorized access or data exfiltration. Target sectors included semiconductor and advanced manufacturing supply chains, defense and defense policy, and human rights and civil society. The attackers leveraged AI models Zhipu GLM 5.2 and DeepSeek V4 variants configured with minimal prompts, combined with classic weaknesses such as authentication bypasses, exposed cloud APIs, and default credentials. Individual attack durations ranged from 20 minutes to over 50 hours, demonstrating how automation increased attack volume and coverage rather than complexity. Credential theft, password spraying, brute forcing, and exploitation of insecure cloud storage and endpoints enabled extensive data access, including over a million records at a U.S. teachers’ union. Indicators include a Hong Kong Cairn server IP 154.44.31.4 and a U.S. staging node 82.29.129.54. Unit 42 assesses these operations as China-nexus intelligence collection under tracking code CL-STA-1238, carried out likely by a single operator or small team.
-
Chinese-speaking attackers use autonomous AI framework Cairn for espionage against semiconductor, defense, and civil society sectors
ler a análise desta fonte ocultar
Between August and September 2026, attackers linked to China-nexus intelligence campaign CL-STA-1238 used the open-source AI penetration testing framework Cairn, paired with Chinese AI models Zhipu GLM and DeepSeek, to autonomously conduct 25 operations targeting at least 19 organizations across semiconductor manufacturing, defense, and civil society sectors. Cairn autonomously planned and executed complex multi-stage attacks, achieving unauthorized access and data retrieval at 10 organizations, including leaking over one million personal records, retrieving military and government identities, and creating persistent administrator access. The attackers used a customized fork of Cairn with an added skill pack, employed weak-password spraying, credential brute forcing, and exploited identity and configuration weaknesses. This campaign illustrates a new paradigm in AI-driven autonomous attacks, emphasizing the importance of strong identity hygiene, attack surface reduction, and patching against known vulnerabilities. Palo Alto Networks offers multiple security solutions to protect customers from such threats.