Loading story…
Security telemetry indicates coordinated, large-scale probing of exposed LLM endpoints consistent with pre-exploitation reconnaissance. GreyNoise reported 91,403 attack sessions against its Ollama honeypot infrastructure (Oct–Jan), attributing activity to two operations systematically enumerating AI deployment weaknesses across major model ecosystems (including OpenAI, Google Gemini, Anthropic, Meta, DeepSeek, Mistral, Alibaba, and xAI). One operation used two IPs to methodically test API formats and identify live endpoints over an 11‑day period, relying on low-noise prompts (e.g., “hi” and simple factual questions) to reduce detection; GreyNoise noted the IPs’ prior association with exploitation of known vulnerabilities, suggesting reconnaissance feeding a broader exploitation pipeline.
In parallel, Check Point described an active GoBruteforcer (GoBrut) botnet wave targeting cryptocurrency and blockchain project databases by brute-forcing services such as FTP, MySQL, PostgreSQL, and phpMyAdmin on Linux, with campaigns amplified by reused AI-generated deployment examples that propagate common usernames and weak defaults, plus exposure from legacy stacks like XAMPP. The Register’s coverage of the WEF Global Cybersecurity Outlook 2026 aligns with these observations at a strategic level, reporting that leaders increasingly prioritize AI security risk assessment and cite data leakage and adversary capability gains as top concerns; however, broader policy and CIO “challenges” commentary does not materially add to the specific reconnaissance/botnet activity described in the threat reporting.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
6 events from the most recent confirmed update back to the earliest known activity.
Check Point disclosed a new wave of GoBruteforcer activity targeting cryptocurrency and blockchain project infrastructure by exploiting weak or default credentials on Linux servers, especially in legacy XAMPP-based environments. The campaign uses exposed FTP to upload a PHP web shell, deploys an updated IRC bot, and in at least one case staged a module to enumerate TRON addresses and query balances.
The World Economic Forum released its Global Cybersecurity Outlook 2026, reporting that 64% of organizations now assess AI tools for security risk before deployment, up from 37% the prior year, and identifying AI as the leading driver of cybersecurity change in 2026.
From late December 2025, GreyNoise saw high-volume enumeration of exposed LLM-related endpoints associated with multiple major AI providers, including activity from IPs 45.88.186[.]70 and 204.76.203[.]125.
GreyNoise observed systematic scanning activity targeting misconfigured proxy servers that could expose access to commercial LLM services, including SSRF attempts involving Ollama model pulls and Twilio SMS webhooks.
Check Point reported seeing a more sophisticated, obfuscated Golang variant of GoBruteforcer in the middle of 2025, indicating the botnet had evolved beyond earlier documented versions.
Palo Alto Networks Unit 42 first documented the GoBruteforcer (GoBrut) malware family, establishing its use as a botnet that compromises Linux systems and brute-forces services such as FTP and databases.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
3 references tracked. Mallory keeps watching after this page renders.
scworld.com
Open sourcego.theregister.com
Open sourcethehackernews.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Threat activity observed in late 2025 and early 2026 shows **high-volume, automated probing** of emerging and legacy internet-facing attack surfaces, including exposed large language model (LLM) endpoints. GreyNoise reported **91,403 attack sessions** against its *Ollama* honeypot infrastructure, attributing the traffic to two operations systematically enumerating AI deployments across major commercial model ecosystems (including OpenAI, Google, Anthropic, Meta, and others). One operation used two IP addresses to methodically test API formats and identify live endpoints across dozens of LLM targets while relying on innocuous prompts (for example, simple greetings and basic trivia questions) to reduce the likelihood of detection; GreyNoise noted the source IPs had prior associations with exploitation of known vulnerabilities, suggesting reconnaissance intended to feed follow-on exploitation. In parallel, Check Point Research detailed an updated, modular **GoBruteforcer** botnet variant that compromises Linux servers by **brute-forcing weak credentials** across common services (including FTP, MySQL, PostgreSQL, and *phpMyAdmin*), then reuses newly compromised hosts to expand scanning and password-guessing at scale. Check Point assessed that **50,000+ internet-facing servers** may be exposed to this activity, citing two drivers: widespread reuse of **AI-generated deployment/configuration examples** that propagate predictable usernames and weak defaults, and continued exposure of legacy stacks (such as *XAMPP*) with insufficient hardening. The newer GoBruteforcer variant reportedly adds more sophisticated capabilities and obfuscation, and the operators appear financially motivated, with activity linked to data theft, selling initial access, and cryptocurrency theft.
Jun 29, 2026
A significant internet-wide scanning campaign was observed over the 2025 Christmas holiday, where a single operator systematically probed for vulnerable systems using more than 240 different exploits. The attacker leveraged ProjectDiscovery's Interactsh platform and Nuclei scanner at scale, confirming vulnerabilities via out-of-band callbacks and building a fresh inventory of exploitable systems. This reconnaissance activity is believed to support the Initial Access Broker (IAB) ecosystem, where access to compromised networks is sold to ransomware operators, setting the stage for targeted attacks throughout 2026. The campaign was traced to two IP addresses and involved over 57,000 unique OAST subdomains, highlighting the industrialization of vulnerability scanning and the supply chain of ransomware operations. In parallel, threat actors have been observed actively targeting large language model (LLM) deployments, with campaigns exploiting server-side request forgery (SSRF) vulnerabilities and systematically mapping AI infrastructure. GreyNoise's honeypot infrastructure recorded over 91,000 attack sessions, including a dramatic spike in activity during the Christmas period, with attackers using similar OAST infrastructure and automation tooling as seen in the broader scanning campaign. These activities underscore the growing threat posed by automated, large-scale reconnaissance and exploitation efforts, which are increasingly targeting both traditional IT assets and emerging AI platforms, and are likely to drive a new wave of intrusions and ransomware attacks in 2026.
Jun 29, 2026Researchers and vendors reported a sharp rise in attacks targeting AI infrastructure, from exposed self-hosted LLM servers to commercial coding assistants used in real intrusions. A Kaspersky honeypot posing as a private AI server with services including **Ollama**, **LM Studio**, **LangServe**, **text-generation-webui**, OpenAI-compatible APIs, RAG databases, and an MCP server was indexed by Shodan within hours and drew more than **113,000 requests** in a month from thousands of IP addresses. Nearly a quarter of the traffic focused on discovering and exploiting AI capabilities, with attackers attempting to consume inference resources, analyze documents, generate content, process vulnerability data, proxy requests to external models, and steal secrets from exposed `.env` files using tooling such as **LLM-Scanner**. The broader threat has moved beyond opportunistic abuse into targeted operations. Anthropic said suspected Chinese state-linked operators misused **Claude Code** against **30 high-value organizations** across technology, finance, chemicals, and government, using the AI assistant to test systems, generate attack code, harvest credentials, identify privileged accounts and backdoors, and support deeper intrusion activity; the company said the tool performed **80% to 90%** of the work in some cases. Separately, defenders were urged to rapidly patch internet-exposed management infrastructure after **CVE-2026-41940** in **cPanel/WHM** was exploited in the wild, allowing pre-authentication root access in as few as four HTTP requests and reportedly being used in ransomware activity, underscoring how exposed services and AI-enabled tradecraft are converging into a faster, more scalable attack model.
Jun 29, 2026