Kaspersky finds AI-orchestrated CyberStrikeAI framework used in real attacks on education sector
AI SECURITYCobalt Strikeredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
Security researchers at Kaspersky found attackers using an open-source tool where an AI model plans and issues commands after a computer has been broken into. The campaign hit schools and education bodies in several African and Latin American countries, and the AI helped the attackers move from initial access to taking control of the whole network.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- Hunt for CyberStrikeAI artefacts such as the self-signed TLS certificate naming the framework and the X-Implant-Token HTTP header.
- Review SQL Server hosts for signs of compromise, particularly any running version 16.0.1000 that may be exposed.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Kaspersky Securelist
Who and what is in it
Malware
Companies