Criminal AI agent swarms
A single attacker with commodity AI coding models can now run an autonomous agent swarm that breaches hundreds of organizations in hours, a capability that used to require a skilled team.
-
ACTA criminal AI-agent swarm breached 395 organizations in under four hours
GreyNoise says an attacker paired OpenAI's Codex and a DeepSeek model to run hundreds of agents against unpatched PaperCut NG/MF servers, compromising 440 instances across 48 countries — 11 organizations breached in 26 seconds. GreyNoise
-
Google's threat-intel team found a separate criminal group harvested thousands of cloud credentials using autonomous AI agents in under six hours. The Hacker News
-
AI-assisted attack tooling is showing up in lower-sophistication criminal breaches now, not just state-linked campaigns
GreyNoise's Sept 21 report traced a WordPress breach chain (wp2shell, two chained CVEs) that stole over 18,000 government and small-business records across 29 countries to a Chinese-speaking actor using custom tools GreyNoise says show signs of LLM generation - a second, independent case from September's state-linked PaperCut swarm. Demonstrated finding, single source. GreyNoise
-
WATCHCisco Talos finds the first AI-directed malware with no human operator
CLOSEDQUORUM, disclosed Sept 22, is a Go implant that queries DeepSeek, Qwen, Mistral and Gemini and picks its next action by model vote, targeting crypto wallets and saved credentials. The public build carries dummy API keys; no confirmed live deployment yet. Cisco Talos
-
SHIPCisco Talos open-sources CAIRN, a toolkit for hunting AI-integrated malware
CAIRN fingerprints the prompt templates, provider endpoints, API keys and jailbreak strings that AI-calling malware leaves behind, following Talos's CLOSEDQUORUM disclosure the same week. Cisco Talos
-
ACTMicrosoft traces a China-linked attack using an AI pentesting tool to hundreds of breached organizations
Microsoft says Storm-0940 used the open-source ARTEX agentic pentesting framework, letting operators plug in any AI model to automate reconnaissance and exfiltration, reaching privileged access in under three hours at some targets via compromised ConnectWise Cloud Backup accounts. Reuters, via KFGO
-
WATCHStorm-0940's AI-pentesting campaign widens from Microsoft's customers into IT and software vendors
Wiz found the same actor behind Microsoft's ARTEX reports running coordinated password-spray and fake-OAuth-callback attacks against Okta, Entra and Cognito logins at IT and software vendors throughout October. Wiz, ARTEX in the Wild
-
Criminal AI-agent operations are shifting from one swarm working a single campaign to one operator running many campaigns in parallel.
CrowdStrike's Oct 29 report on VAPOR PANDA found one operator steering the ARTEX framework against 200+ organizations in 14 countries over 11 days, confirming post-exploitation at nine - the first time it has seen one actor run several engagements at once rather than one at a time. The same week, Wiz traced Gheist, an automated campaign that has hit 850+ GitHub accounts since mid-September, exfiltrating secrets from thousands of repositories with no human steering individual attacks at all. CrowdStrike, VAPOR PANDA uses ARTEX · Wiz, Gheist
-
Security researchers say today's agent-driven attacks are still crude enough to leave a trail - but warn that window is closing.
Wiz's Oct 29 report on three live intrusions found a machine-paced, self-correcting trail - 602 scripted steps in 4.5 hours in one case. The same week, Joshua Saxe told Zvi Mowshowitz's newsletter we're in 'a defender-dominant window' before agent swarms do '10-100x the damage' of past attacks - a prediction, not yet observed. Wiz, The Rise of Agentic Attacks · Zvi Mowshowitz, AI #192
-
AI-integrated malware is spreading beyond isolated proof-of-concept builds into a wider toolkit of live criminal frameworks.
Cisco Talos found two new AI-enabled threats active in the wild this week: NIK C2 (Oct 29), whose implant calls the OpenAI API directly from a victim's machine to analyze stolen data, and VOLTA (Oct 31), an infostealer that uses an LLM to rank which victims' assets are most valuable - a different build from September's CLOSEDQUORUM, not a repeat of it. Cisco Talos, NIK C2 · Cisco Talos, Appraisal by AI (VOLTA)
-
Nov 3, 2026 Updated this evening
WATCHCoordinated network of 400+ AI apps hid deepfake generation behind fake UIs
WIRED traced a coordinated network of applications and websites that appeared as legitimate AI tools but hid sexual and violent deepfake generation features. The apps passed platform review by appearing normal, then activated hidden functionality. Apple removed 19 apps; Google and Meta took enforcement action on thousands of accounts and pages. The network traces to Chinese-language developers and continued publishing new apps as the investigation concluded. WIRED, Traces 400+ AI Apps Hiding Abusive Deepfake Tools
-
ACT800+ instances of the ARTEX hacking tool found exposed online
Censys says the agentic pentesting framework, tied to attacks on Korean banks and ConnectWise customers, doesn't need internet exposure yet turned up unauthenticated on 800+ public hosts, some leaking stolen credentials and attacker implants. TechCrunch, hundreds of ARTEX AI hacking tools exposed · Censys, ARTEX: Agentic Asbestos