ATTACKERS targeted Thailand's Ministry of Finance using an autonomous AI tool named Hermes to conduct a cyber-espionage operation. The incident, reported by Hunt.io, highlights the increasing role of AI in facilitating attacks. Key techniques included exploiting CVEs and employing Web shells for privilege escalation. Despite the sophisticated use of AI, vulnerabilities such as open directories led to the exposure of the operation.
Researchers noted that while there was no evidence of data exfiltration, the attack infrastructure was assessed to be linked to Chinese-speaking actors. Recommendations for enhancing security include reviewing authentication modes and patching known exploits.