Cairn AI framework used in 25 intrusions against at least 19 organizations
Original title: Attackers Use Autonomous AI to Target Semiconductor, Defense and Civil Society Sectors
Unit 42 says access or data theft succeeded at 10 targets, including more than one million records at one organization.
From August to September 2026, Chinese-speaking attackers used a customized fork of the open-source Cairn penetration-testing framework, driven by Zhipu GLM and DeepSeek models, to run 25 operations against at least 19 organizations. Operators supplied a target and a one-line goal; Cairn planned, executed and logged results. Unit 42 assesses with moderate confidence that the activity is China-nexus collection tracked as CL-STA-1238, aimed at semiconductor manufacturing, U.S. defense policy and civil society.
Unconfirmed: Unit 42 assigns only moderate confidence to the China-nexus CL-STA-1238 assessment.
- Thirteen operations used GLM 5.2, eight DeepSeek V4 Flash and four DeepSeek V4 Pro.
- Runs lasted from 20 minutes to more than 50 hours.
- The fork ran in Hong Kong at 154.44.31.4, with U.S. egress 82.29.129.54.
- Outcomes included credentials, persistent admin accounts and a changed standards ballot.
Impact: Unauthorized access or data retrieval at 10 organizations
- 1.Hunt for Cairn controller 154.44.31.4 and staging node 82.29.129.54.
- Vendors
- Zhipu
- Threat actors
- CL-STA-1238
- Malware
- Cairn
- Organizations
- Unit 42Palo Alto Networks
- Countries
- ChinaUnited StatesHong Kong
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| ipv4 | 154.44.31.4 | ustomized fork of Cairn from a server hosted in Hong Kong ( 154.44.31[.]4 , AS979, NetLab Global) and hosted an attack egress and s |
| ipv4 | 82.29.129.54 | and hosted an attack egress and staging node in the U.S. ( 82.29.129[.]54 , AS142036, Hosteons Pte. Ltd.). Figure 1 below shows a s |
From the original article
9 min read at unit42.paloaltonetworks.com
Our analysis of how attackers used the open-source Cairn AI agent framework to autonomously breach semiconductor, defense and civic targets. The post Attackers Use Autonomous AI to Target Semiconductor, Defense and Civil Society Sectors appeared first on Unit 42.
By Unit 42 · unit42.paloaltonetworks.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.