Lukasz Olejnik
Chinese-speaking cyber threat actor used DeepSeek, Qwen, Kimi and MiniMax to automate attacks on internet-facing infrastructure. AI agents handled target discovery, searched GitHub for tools, assessed CVEs, narrowed targets, launched exploitation attempts. Autonomous attacks had limited success. Still, they decreases hundreds of hours of targeting analysis into minutes. Separate manual campaigns exfiltrated data from a few targets. https://unit42.paloaltonetworks.com/autonomous-ai-cyber-attack-campaign/