Chinese-Speaking Threat Actor Harnesses AI Models for Autonomous Cyberattacks

Unit 42 researchers detail a Chinese-speaking threat actor leveraging autonomous AI models to conduct cyberattacks. The campaign combines AI-driven automated scanning across seven distinct vulnerabilities with manual exploitation techniques. This represents a significant evolution in threat actor tradecraft, using AI to scale and accelerate attack operations. The hybrid approach of autonomous AI scanning paired with human-directed exploitation suggests a sophisticated operational model. This campaign highlights the growing intersection of AI capabilities and offensive cyber operations by nation-state-linked actors.