Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
4 IOCs

Autonomous AI Agent Accidentally Exposes Hacker’s Entire Attack Infrastructure

Cyber Press
Cyber Press
Published July 31, 2026Original Report

Excerpt

A Chinese-speaking threat actor has been observed deploying an AI-powered autonomous hacking framework that unintentionally exposed its full operational infrastructure, offering rare insight into how attackers are integrating large language models (LLMs) into real-world offensive campaigns. Researchers from Unit 42 uncovered the activity after the attacker’s AI agent mistakenly launched a public file server from its working directory, revealing sensitive assets including…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYunknownINFRASTRUCTUREcode.newcli.comCAPABILITYunknownVICTIMunknown
Adversary
Infrastructure(1)
Capability
Victim

Indicators of Compromise

Open the mindmap →

4 indicators

TypeIndicatorConfidenceScoreFirst Seen
CVECVE-2026-33017HighScore 67/100First seen
CVECVE-2026-21858MediumScore 61/100First seen
Domaincode.newcli.comHighScore 58/100First seen
CVECVE-2025-68613HighScore 63/100First seen

IOC Relationship Graph

Building graph…