AI boosts a Chinese-speaking crew's server raids, 170k targets at once
Cisco Talos exposed UAT-10147, a Chinese-speaking group auto-piloting attacks on Windows and Linux web servers with open-source tools plus AI. One open directory held a target list of about 170,000 URLs, split for efficient parsing. The group leans on AI to refine exploits and automate post-exploitation, then lands SPECTRE (an unreported cross-platform implant) and a Linux rootkit for SEO fraud and data theft.