Threat actor

China-linked threat actor

0 mentions in 7 days · 0 in 30 days · 2 total · first seen Aug 12, 2026 · last Aug 12, 2026

Timeline2 articles

China-Linked Hackers Use AI Agents in Autonomous Attack on Taiwan

Suspected Chinese hackers used eight AI agents to autonomously breach Taiwan government networks, compromising 85+ accounts and stealing 2,500 personnel records.

Israeli cybersecurity firm Dream documented what appears to be the first fully autonomous, end-to-end AI hacking operation against a government target, suspected to be Taiwan, in early July. The toolkit, built from open-source agent frameworks Hermes and OpenClaw, deployed up to eight agents that mapped 21 government systems, compromised at least 85 accounts, and extracted over 2,500 personnel records before expanding to a nuclear safety agency and at least seven energy companies. Operators bypassed the model's guardrails by framing the entire campaign as an authorized penetration test. Dream found a 160MB, 1,395-file archive containing the deliberately assembled multi-agent weapon.

Security AffairsAug 12, 17:58 UTC · Aug 12, 2026Threat actor in the wild2

Researchers observe first ‘near-autonomous’ AI attack on government target in Taiwan

Dream researchers observed the first near-autonomous AI attack on a government target, with suspected Chinese hackers stealing 2,500+ Taiwan records.

Israeli firm Dream reported that suspected Chinese hackers used open-source AI models to run a near-autonomous cyberattack against Taiwan's government, extracting over 2,500 personnel records. The framework, built on Hermes and OpenClaw, adapted mid-operation without human intervention, ran autonomous 'Learning Cycles' researching applicable vulnerabilities, and expanded to supply chain vendors, a nuclear safety agency, a government email system, and seven-plus energy companies. Attackers bypassed safety guardrails by framing the work as authorized penetration testing. Dream discovered the operation via a 160MB online archive of nearly 1,400 files.

CyberScoopAug 12, 17:05 UTC · Aug 12, 2026Threat actor in the wild

Appears with

victim Taiwan government 2 product Hermes 2 product OpenClaw 2 vendor Dream Security 2 organization Anthropic 2 organization Financial Times 2 organization CyberScoop 1 victim energy sector companies 1 organization Meta 1 organization OpenAI 1

Entities are extracted by the model from each article. Watching an entity keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.