CyberStrikeAI
ProductAm I affected?
Checked against NVD affected-version data on our server. Nothing you type is stored.
Recent news
Hackers abuse open-source CyberStrikeAI tool to run AI-driven network intrusions
Attackers are abusing CyberStrikeAI, an open-source penetration-testing framework, to orchestrate intrusions against educational organisations in Africa and Latin America. Kaspersky's investigation, published on 2 November, describes a human-directed operation in which an LLM selects tools, generates commands, interprets results and determines subsequent actions.
Attackers use open-source AI framework CyberStrikeAI to take over Windows domains
Attackers used the open-source Go-based penetration testing platform CyberStrikeAI, where a language model on the control server selects and runs commands, to compromise a SQL Server, map a Windows domain, roast credentials and perform DCSync and Golden Ticket attacks. Securelist, which found the campaign during routine monitoring, reports education organisations in Africa and Latin America among the victims, and says the malware on victim machines contains no AI. Because the techniques are conventional, standard detection of remote scheduled tasks, LSASS access and WMI or WinRM use still applies.