A Chinese hacker has utilized large language models, specifically DeepSeek's AI model Hermes Agent, to orchestrate cyber attacks targeting internet-exposed infrastructure in Asia. Operating under aliases 'knaithe' and 'KnYuan', the hacker focused on exploiting various vulnerabilities, including some with high CVSS ratings.
Despite limited success in full compromises due to security configurations, evidence suggests an evolution in their tactics, such as the combination of automated AI-driven processes with manual exploitation. The campaign highlights a growing trend of leveraging AI for enhanced offensive capabilities in cyber warfare.