Kaspersky details attacks on education organizations in Africa and Latin America using CyberStrikeAI, an LLM-orchestrated C2 framework. The investigation…

CyberStrikeAI integrates LLMs to automate post-exploitation, accelerating attacks and demanding new detection strategies beyond human-typed command assumptions.

CyberStrikeAI, ARTEX and CAIRN: LLM-Orchestrated Command and Control, Post-Exploitation, and the Nation-State Adoption Curve

CyberStrikeAI, guiado por un modelo de IA, tomó un dominio de Windows en centros educativos de América Latina en 3 o 4 días.

Hackers are now using an AI-driven command framework called CyberStrikeAI to break into Windows networks and take over entire domains. Education organizations in Africa and Latin America were among the confirmed victims. The tool lets a language model decide which commands to run, so the operator no longer types each step by hand. CyberStrikeAI is an open-source, Go-based platform built for penetration testing. Criminals have already turned it toward real targets, and earlier reports showed how attackers targeted Fortinet FortiGate devices with the same framework. This new campaign shows the tool being used for something bigger: moving from a single weak server to full control of a network. Analysts at Securelist identified the campaign during routine threat monitoring. They described it as one of the first public cases of a language model being used inside a live intrusion. CyberStrikeAI control panel’s self-signed TLS certificate (Source – Securelist) The human operator sets a broad goal, and the AI model on the control server picks the tools, writes the commands, and reads the results. The malware on the victim machine is a plain implant with no AI inside it. Hackers Use CyberStrikeAI Agents The intrusion began with a person. The operator got into a compromised SQL Server, collected basic host details, dropped tools, and scanned the network. That took almost a day, and then the attackers went quiet for about two weeks. When they came back, the CyberStrikeAI agent took over. Within two minutes it set up persistence through a scheduled task named SystemUpdate and finished local checks. Over the next five hours it mapped the domain using PowerShell and LDAP queries. It also collected data needed for Kerberoasting and AS-REP Roasting, two methods for cracking account passwords. Other reports show how attackers coordinate 44 AI agents with this same platform, which suggests the approach is spreading. After a short pause of a few days, the final phase ran in under an hour. The agent moved sideways through SMB and WMI, dumped credentials from many machines, and exported database content. It pulled passwords from registry files and from the LSASS process using the comsvcs.dll MiniDump function. After it compromised the built-in domain administrator, it ran DCSync and Golden Ticket techniques with a renamed Mimikatz tool. The whole job, from agent install to domain admin, took only three to four days. The attackers tried to stay hidden. They encoded commands in Base64, split scripts into several files, and rebuilt them with certutil. DNSLog.cn (Source – Securelist) They also named one beacon svchosts.exe so it looked like a normal Windows process. Some scripts contained Chinese comments, and the attackers used the Chinese service dnslog.cn to find victim IP addresses. Server restarts mostly fell within UTC+8 business hours. Together these clues suggest a Chinese-speaking operator, but Securelist could not link the activity to any known group. Why Defenders Can Still Catch It The methods themselves are not new. The agent used well-known tools, and the AI mainly made the work faster and easier. Because the model runs on the attacker’s server, defenders will not see AI traffic or odd resource use inside their network. They will see the same actions a human intruder would take. That means ordinary detection rules still work. Teams should watch for remote scheduled tasks created with schtasks.exe, LSASS memory access, and WMI or WinRM commands from unusual hosts. A DCSync attack steals password hashes by posing as a domain controller. Event ID 4662 helps catch it when the request comes from a system that is not a real domain controller. Rotating the krbtgt account twice after any domain admin compromise cancels forged Golden Tickets. Defenders should also check for commands running from the sqlservr.exe process, since that was the likely way in. They should patch and lock down exposed SQL Servers and turn on LAPS. They should also limit replication rights and keep logs for process launches, PowerShell activity, and logons. Microsoft recently described AI agents targeting Microsoft 365 tenants, so cloud accounts linked to the domain need the same care. Indicators of compromise (IoCs):- Type Indicator Description Hash D726A8B4886C636F76CA6D30EF6A6FF4 CyberStrikeAI Windows beacon (c:\windows\temp\svchosts.exe) Hash 2770562d104391b92b42671c270079bb CyberStrikeAI Windows beacon (c:\windows\temp\svcmon32.exe, c:\programdata\svcmon32.exe) Hash 09e1da2afa1216ecc55648ec8e122d2a CyberStrikeAI Linux beacon Hash 805B9E4AE74C903787416800999B8418 CyberStrikeAI Linux beacon Hash 29EFD64DD3C7FE1E2B022B7AD73A1BA5 C:\Windows\Temp\wdiag2.exe (Mimikatz) Hash 74F57B3E897A4960DCDD5B7E8A54F9DF c:\rwx\RogueWinRM.exe Hash 0BBD08AF95F877F1D568B03DE2EB76B4 c:\ProgramData\p1.ps1 (reverse shell PowerShell script) IP address 185.186.245[.]144 C2 for Windows beacon Domain fastcdn[.]bar C2 for Windows beacon Domain media.fastcdn[.]bar C2 for Linux beacon IP address 104.234.26[.]163 C2 for payload delivery and Linux beacon Note:   IP addresses and domains are intentionally Qdefanged (e.g.,  [.] ) to prevent accidental resolution or hyperlinking. Re-fang only within controlled threat intelligence platforms such as MISP, VirusTotal, or your SIEM . Give your SOC the alert context to stops incidents quickly. Integrate Threat Intel from 16K SOCs . The post Hackers Use CyberStrikeAI Agents to Automate Windows Domain Takeovers and Credential Theft appeared first on Cyber Security News .

AI-Powered Cyberattacks Move From Planning to Direct System Control Cybercriminals are increasingly using artificial intelligence to move beyond researching targets and preparing attacks, with new investigations revealing how AI-powered tools can directly control compromised systems, steal credentials, and extract sensitive databases. Researchers at Kaspersky have uncovered attacks involving CyberStrikeAI, an open-source penetration testing framework that attackers used to compromise Active Directory environments at educational organizations across multiple countries in Africa and Latin America.

We analyze a series of attacks on educational institutions that were fully automated during the post-exploitation phase using the CyberStrikeAI penetration testing framework.

We analyze a series of attacks on educational institutions that were fully automated during the post-exploitation phase using the CyberStrikeAI penetration testing framework.

TrendAI analyzes three cyber campaigns involving autonomous and AI-assisted attacks, including CyberStrikeAI activity targeting Japan.

TrendAI analyzes three cyber campaigns involving autonomous and AI-assisted attacks, including CyberStrikeAI activity targeting Japan.

Cet article analyse trois infrastructures d'attaque distinctes ayant ciblé principalement des organisations japonaises en 2026. Il fait suite à une alerte du gouvernement japonais du 9 octobre 2026 décrivant le cyberespace comme en « état d'urgence ».

TrendAI analyzes three cyber campaigns involving autonomous and AI-assisted attacks, including CyberStrikeAI activity targeting Japan.

Cybersecurity researchers have disclosed details of three cyber attacks targeting organizations in Japan in which artificial intelligence (AI) was a key element, either in the driving seat or to assist a human operator. TrendAI, which analyzed three exposed server environments used by threat actors to conduct the malicious cyber operations, described them as distinct from previously published

El informe es de TrendAI, la división empresarial de Trend Micro, y lo firman Bakuei Matsukawa y Joseph C. Chen, que analizaron tres entornos de servidor expuestos con herramientas, listas de objetivos, resultados, logs e historiales de comandos. El primer caso es el que da el título: usaron…

CyberStrikeAI repartió un ataque entero entre 44 agentes de IA y lo dejó corriendo contra organizaciones de Japón, con reconocimiento, explotación y salida de datos dentro del mismo flujo. TrendAI reconstruyó la operación desde los servidores del atacante, dejados con directorios abiertos: herramientas, guiones, listas de objetivos e historiales quedaron a la vista. La investigación de TrendAI, publicada en inglés el 27 de octubre, examinó tres infraestructuras de ataque distintas. La Oficina Nacional de Ciberseguridad de Japón había alertado a las empresas el 9 de octubre, tras filtraciones desde sistemas web, y el responsable de ciberseguridad del partido gobernante describió el ciberespacio del país en estado de emergencia.

Cybersecurity researchers have disclosed details of three cyber attacks targeting organizations in Japan in which artificial intelligence (AI) was a key element, either in the driving seat or to assist a human operator. TrendAI, which analyzed three exposed server environments used by threat actors to conduct the malicious cyber operations, described them as distinct from previously published