AI-Powered Espionage Campaign Targets Government Linux Infrastructure
Unit 42 says cluster CL-UNK-1211 used AI-generated payloads to spy on government Linux infrastructure.
78
Product
Advanced WildFire
- Mentions · 7d0
- Mentions · 30d1
- All mentions3
- First seenAug 17, 2026
- Last mentioned15d ago
Timeline
3 articles · newest firstAdvanced WildFire Archives
Palo Alto Networks describes Advanced WildFire as its cloud malware analysis engine using machine learning and crowdsourced intelligence.
10
Almost Half of Malware Samples Communicate Direct to IP
Unit 42 analysis of 4 million malware reports finds 45% of C2-active samples connect directly to hard-coded IPs, bypassing DNS defenses.
55
Appears with
- Palo Alto Networksorganization · 3
- Palo Alto Networksvendor · 3
- Unit 42organization · 2
- CL-UNK-1211threat actor · 1
- Cortex XSIAMproduct · 1
- Phorpiexmalware · 1
- Cortex XDRproduct · 1
- Pleskproduct · 1
- Mozimalware · 1
- Unit 42threat actor · 1
- Unit 42vendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.