Infosecurity
Chinese hacker uses DeepSeek AI to target Asian infrastructure
Part of the DeepSeek story · since 31 Jul
- Fri 31 Jul, 12:00 UTC. The Hacker News, first report. AI Hacking Tool DeepSeek Used on Telegram by Chinese Threat Actor.
- Sat 1 Aug, 02:41 UTC. Infosecurity, its first report on the story. Chinese hacker uses DeepSeek AI to target Asian infrastructure. This article, 2nd of 5.
- Mon 3 Aug, 16:32 UTC. Security Affairs, its first report on the story. Chinese AI Tool DeepSeek Automates Hacking Campaign Targeting n8n.
- Mon 3 Aug, 17:07 UTC. Dark Reading, its first report on the story. Chinese Actor Weaponizes DeepSeek AI Agent to Attack Security Firm.
- Wed 5 Aug, 07:51 UTC. SecurityOnline, its first report on the story. AI powered Chinese hackers breach Malaysian agency autonomously.
A Chinese hacker has utilized large language models, specifically DeepSeek's AI model Hermes Agent, to orchestrate cyber attacks targeting internet-exposed infrastructure in Asia. Operating under aliases 'knaithe' and 'KnYuan', the hacker focused on exploiting various vulnerabilities, including some with high CVSS ratings.
Despite limited success in full compromises due to security configurations, evidence suggests an evolution in their tactics, such as the combination of automated AI-driven processes with manual exploitation. The campaign highlights a growing trend of leveraging AI for enhanced offensive capabilities in cyber warfare.
How the story developed
5 articles from 5 outlets since 31 Jul. Quiet since 5 Aug. This was the 2nd report, 15 hours after the first.
- Fri 31 Jul, 12:00 UTC. The Hacker News, first report. AI Hacking Tool DeepSeek Used on Telegram by Chinese Threat Actor.
- Sat 1 Aug, 02:41 UTC. Infosecurity, its first report on the story. Chinese hacker uses DeepSeek AI to target Asian infrastructure. This article, 2nd of 5.
- Mon 3 Aug, 16:32 UTC. Security Affairs, its first report on the story. Chinese AI Tool DeepSeek Automates Hacking Campaign Targeting n8n.
- Mon 3 Aug, 17:07 UTC. Dark Reading, its first report on the story. Chinese Actor Weaponizes DeepSeek AI Agent to Attack Security Firm.
- Wed 5 Aug, 07:51 UTC. SecurityOnline, its first report on the story. AI powered Chinese hackers breach Malaysian agency autonomously.
- No CVE
- Larger: an outlet’s first report
- Coverage over time
- Quiet time, folded
Show all 5 articles as a listHide the list
- Fri 31 JulDay 01
- AI Hacking Tool DeepSeek Used on Telegram by Chinese Threat Actor12:00 · The Hacker News · First report
- Sat 1 AugDay 11
- Chinese hacker uses DeepSeek AI to target Asian infrastructure02:41 · Infosecurity · This article, 2nd of 5
Quiet for 3 days
Mon 3 AugDay 32- Chinese AI Tool DeepSeek Automates Hacking Campaign Targeting n8n16:32 · Security Affairs · Picked up again
- Chinese Actor Weaponizes DeepSeek AI Agent to Attack Security Firm17:07 · Dark Reading
Quiet for 2 days
Wed 5 AugDay 51- AI powered Chinese hackers breach Malaysian agency autonomously07:51 · SecurityOnline