Hackers used autonomous AI agent to spy on Thailand's finance ministry
Hackers used an autonomous artificial intelligence agent to carry out a cyber-espionage campaign against Thailand's Ministry of Finance, researchers discovered.
Hackers used an autonomous artificial intelligence agent to carry out a cyber-espionage campaign against Thailand's Ministry of Finance, according to researchers who uncovered a hacker-controlled server that exposed the inner workings of the attack.
Cybersecurity firm Hunt.io said in a report released last week that it discovered hundreds of files left publicly accessible on infrastructure operated by the attackers while the intrusion was still in progress.
The exposed files included malware, stolen credentials, attack scripts, AI agent logs, and evidence that the attackers had already gained access to multiple systems inside the Ministry of Finance. The researchers have not determined how the attackers initially breached the ministry's network.
Source: https://therecord.media/thailand-hackers-ai-finance-ministry
Related breach coverage
- Thailand’s Ministry of Finance Targeted With Hermes AI Agent Running Unattended, Hades Implant Staged2026-07-24
Hunt.io uncovered a cyber-espionage attack on Thailand’s Finance Ministry using Hermes AI agent and Hades malware for reconnaissance and persistence. Researchers at Hunt.io have uncovered an intrusion targeting Thailand’s Ministry of Finance that offers a rare look inside a live cyber-espionage operation. Instead of recovering malware after the fact, the team found exposed staging servers […]
- Claude Code and DeepSeek Powered Chinese Cyber Espionage Campaign2026-07-16
Chinese actors used Claude Code and DeepSeek to automate attacks that breached government systems and targeted financial firms. Hunt.io researchers stumbled onto an active intrusion campaign in June 2026 while pivoting on known TencShell command-and-control infrastructure. A single HTTP header fingerprint on port 1111 led them to 13 Hong Kong-based servers and, on one of […]
- EU Targets Russian Intelligence Officers Accused of Running a Yearslong Cyber Spying Campaign2026-07-13
The move targeted people and entities accused of links to an online spying network that the EU claims targeted governments and carried out sabotage operations against critical infrastructure. The post EU Targets Russian Intelligence Officers Accused of Running a Yearslong Cyber Spying Campaign appeared first on SecurityWeek.
- Russia accuses Telegram founder of aiding terrorism, seeks international arrest2026-07-29
Russia is seeking to place Telegram founder Pavel Durov on an international wanted list, alleging that the app has been used by Ukrainian intelligence to organize terrorist attacks and conduct espionage inside Russia.