AI BriefingChina-linked operator used AI agents to compromise 48 government and corporate targets in Asia
·2026.10.20 21:35
Key point
Researchers recovered 16.4 GB of evidence from an exposed server, revealing 66 active intrusion projects with root access achieved on six targets.
Details
- A China-linked operator deployed an autonomous AI intrusion platform to attack government and corporate entities across Asia, with 48 of 66 active projects reaching at least session-level access.
- Security researchers identified the campaign after finding an APAC-hosted VPS with its working directory exposed on port 9000 without authentication, containing over 150 live campaign files.
- Vulnonhq obtained access to the server and recovered 16.4 GB of evidence, including deleted container layers, to map the full scope of the operations.
- Targets included the Vietnam Ministry of Defence, Vietnam Ministry of Public Security, Taiwan Legislative Yuan, Indonesia State Intelligence Agency, and India CDAC, alongside airlines, payments, and retail sectors.
- Six of the compromised targets achieved root or SYSTEM level access.
This summary was generated automatically by AI. Check the original for the author's claims and context. Copyright belongs to the original author.
Our guide explains how the AI works. Report summary errors, attribution issues, or removal requests via Contact.
Related
Uber Achieves 52% Reduction in Per-Session AI Agent Costs Through Cost Structure Analysis and Optimization