Chinese Hackers Use AI Agents to Exploit Web Servers and Automate Attacks
Brief
A Chinese-speaking cybercrime group is using AI-assisted tools to turn vulnerable web servers into entry points. It shows how familiar flaws become more dangerous when attackers automate the work around them.
The group, tracked as UAT-10147, targeted internet-facing Windows and Linux systems in government, education, media, technology, and gaming. Victims were identified across several countries, while a linked server held a target list of about 170,000 URLs.
Cisco Talos identified the activity and found that the operators mixed public exploits with AI-generated instructions, scripts, and testing steps.
Cisco Talos said in a report shared with Cyber Security News (CSN) that the approach helped the group carry out complex intrusions at greater scale. The immediate concern is not a new flaw alone, but a faster attack process.