Tag
high
advisory
Threat Actor Leverages AI-Driven ARTEX Tooling to Target South Korean Financial Institutions
3 TTPs 10 IOCsAn unidentified, likely Chinese-speaking threat actor is targeting South Korean financial entities using the open-source ARTEX penetration testing framework managed by Large Language Models to conduct reconnaissance and data exfiltration.
financial-sector
ai-threat
exfiltration
lateral-movement
reconnaissance
3t
10i
high
advisory
Generative Threat Groups Automating Cyber Operations with AI
3 TTPsAnthropic has documented multiple threat actors leveraging AI models to automate end-to-end cyberattack workflows including reconnaissance, vulnerability research, credential harvesting, and large-scale data exfiltration.
AWS EC2 +2
ai-threat
cyber-espionage
surveillance
reconnaissance
data-exfiltration
3t
high
advisory
AI-Assisted Multi-Stage Campaigns Targeting Latin American Organizations
1 rule 4 TTPs 4 IOCsTwo distinct activity clusters (CL-CRI-1131 and CL-CRI-1163) are leveraging LLMs via hosted NextChat instances to troubleshoot and refine post-exploitation scripts and exfiltration infrastructure against entities in the Latin American transportation, government, and financial sectors.
CL-CRI-1131
CL-CRI-1163
ai-threat
exfiltration
latam
socks5
1r
4t
4i