AI Agent Hermes Automates Post‑Exploitation in Thailand Finance Ministry Breach
Hunt.io discovered open directories on a Hong Kong server showing Hermes AI running in unattended YOLO mode, automating privilege escalation, enumeration, and deployment of a custom Go implant called Hades, compromising multiple systems in Thailand's Ministry of Finance. This marks the first known use of an autonomous AI agent for espionage‑scale post‑exploitation, highlighting new threat vectors as AI tools become weaponized.