Hackers Use Hundreds of AI Agents to Exploit PaperCut Servers and Steal Windows Credentials
A threat actor used AI agents to exploit PaperCut, compromising about 440 servers and stealing Windows credentials.
88
Product
chisel
- Mentions · 7d0
- Mentions · 30d1
- All mentions2
- First seenSep 8, 2026
- Last mentioned14d ago
Timeline
2 articles · newest firstBreeze Comet Executes Hundreds of Fraudulent Transactions via Brazilian Payment Systems
Google/Mandiant profile Breeze Comet, a Brazil-based e-crime group executing fraudulent Pix and STR payment transactions at banks, retailers, and fintechs.
82
Related CVEs
by mentions- CVE-2026-8207861%9.4Unsafe Reflection RCE in PaperCut NG/MF, Chained with Auth Bypass in Attacks
- CVE-2026-8157884%8.8Missing Authentication for Critical Function in PaperCut NG/MF Web Interface
Appears with
- GreyNoiseorganization · 1
- Palo Alto Networksvendor · 1
- SoftEther VPNproduct · 1
- Google Threat Intelligence Grouporganization · 1
- BOATBEAMmalware · 1
- KICKPLATEmalware · 1
- Axurvendor · 1
- Plump Spiderthreat actor · 1
- DeepSeekai model · 1
- PaperCut MFproduct · 1
- Breeze Cometthreat actor · 1
- Impacketproduct · 1
- OpenAIvendor · 1
- Trend Microvendor · 1
- XWormmalware · 1
- Mandiantorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.