tech π» AI-powered hack group uses SPECTRE, Linux rootkits
A Chinese-speaking cybercrime group named UAT-10147 is actively targeting web servers across multiple sectors globally. The group primarily targets systems in Brazil, Bolivia, China, Canada, and Vietnam. The threat activity was uncovered following observations of an open directory associated with the threat actors. They are utilizing AI to refine exploits and automate attacks, which include deploying SPECTRE and Linux rootkits. Moving forward, the group continues to use various known vulnerabilities for persistence and data theft. π€