PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Chinese-Speaking Operator Uses AI Agents to Target Government and Education Systems Across Asia

hunt.io | blog | #ai-security | #threat-intelligence | #apt | #ai-agents | #claude | #deepseek | #secflow | #qwen
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Hunt.io traced five exposed directories to a SecFlow-run campaign that used Claude, Qwen and DeepSeek as workers against government, education and diplomatic targets across Asia.
Published
Collected

Related coverage

research · hunt.io
Ukraine’s State Data-Exchange System Targeted by Russian-Speaking Operator via Graylog Log4Shell
An exposed open directory revealed a solo operator's full Log4Shell chain against a Graylog host holding Trembita logs, with the access log that proves execution.
research · nebusec.ai
Beyond the Model: Benchmarking Codex Security, Claude Security, and Nebu
Nebu benchmarks its security pipeline against Codex Security and Claude Security on 76 known bugs; with GPT-5.4 it matches the best Codex result in less time at lower cost.
research · ethiack.com
Strategy is Key: Evaluating the Pentesting Skills of Frontier LLMs
This research provides technical context that security teams can use for monitoring and validation.
vulnerability · volexity.com
DriftingCloud: Zero-Day Sophos Firewall Exploitation and an Insidious Breach
Volexity frequently works with individuals and organizations heavily targeted by sophisticated, motivated, and well-equipped threat actors from around the world. Some of these individuals or organizations are attacked infrequently or […]
vulnerability · volexity.com
Active Exploitation of Newly Patched ColdFusion Vulnerability (CVE-2018-15961)
If your organization is running an Internet-facing version of ColdFusion, you may want to take a close look at your server. Volexity recently observed active exploitation of a newly patched […]
vulnerability · volexity.com
Patchwork APT Group Targets US Think Tanks
In March and April 2018, Volexity identified multiple spear phishing campaigns attributed to Patchwork, an Indian APT group also known as Dropping Elephant. This increase in threat activity was consistent […]
Back