
Hackers Built an AI-Powered Attack Machine and Accidentally Left the Control Panel Open
ThreatMon exposed a Blackhatsect0r server holding 16,415 credentials and roughly 498,000 target URLs.
4 stories, newest first · one card per story

ThreatMon exposed a Blackhatsect0r server holding 16,415 credentials and roughly 498,000 target URLs.

SOCRadar linked the BlackHatSect0r crew to a DeepSeek-powered AI agent that automated scanning and harvested 16,834 credentials from exposed systems.

Researchers exposed BlackHatSect0r && DXQRTXX infrastructure showing a safety-disabled Hermes AI agent used to automate scanning, credential harvesting, and vishing against French telecom subscribers.

SOCRadar analyzes the operation server of French-speaking crew BlackHatSect0r && DXQRTXX, revealing operators rewrote their AI agent's memory to read 'I am a weapon'.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views