As cited
Copy frozen at (site build).
threat intel
UAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux Rootkit
Researchers identified a Chinese-speaking cybercrime group labeled UAT-10147 that leverages artificial intelligence to scale attacks against Windows and Linux web servers. The group deploys malware including SPECTRE with endpoint detection and response (EDR) bypass capabilities and a Linux rootkit, targeting organizations in education, media, technology, and gaming sectors primarily in Brazil, Bolivia, China, Canada, and Vietnam.
Why it matters: Organizations operating web servers in the targeted sectors and regions should review their EDR configurations and Linux security postures, as this group actively exploits detection evasion to establish persistence.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
UAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux Rootkit
Researchers identified a Chinese-speaking cybercrime group labeled UAT-10147 that leverages artificial intelligence to scale attacks against Windows and Linux web servers. The group deploys malware including SPECTRE with endpoint detection and response (EDR) bypass capabilities and a Linux rootkit, targeting organizations in education, media, technology, and gaming sectors primarily in Brazil, Bolivia, China, Canada, and Vietnam.
Why it matters: Organizations operating web servers in the targeted sectors and regions should review their EDR configurations and Linux security postures, as this group actively exploits detection evasion to establish persistence.
- Source published
- First seen by Cybersecurity Tracker