Loading story…
Villager, an AI-driven penetration testing tool linked to the suspicious China-based company Cyberspike, has been downloaded nearly 11,000 times since July 2025. Researchers warn that its automation and integration of established hacktools, such as AsyncRAT and Mimikatz, lower the barrier for malicious use by less-skilled actors. The tool's design enables rapid, scalable, and difficult-to-detect attacks, marking a significant evolution in AI-driven offensive security capabilities.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
CrowdStrike reported that AI has become both an offensive enabler and a direct target in cyberattacks, with AI-enabled malicious activity rising **89%** over the past year and generating more than twice as much potentially malicious detection noise as human-triggered activity. The company said attackers are using frontier models to identify vulnerabilities, generate scripts and payloads, automate intrusion workflows, and troubleshoot operations, while also pursuing attacks such as **LLMjacking**, AI cost-harvesting, and compromises of AI infrastructure and agentic systems. The findings align with earlier disclosures from OpenAI, which said it banned accounts tied to publicly reported **China-linked** actors including **Vixen** and **Keyhole Panda**, as well as suspected **DPRK-affiliated** operators, for using AI to support vulnerability research, scripting, phishing, malware research, translation, and cryptocurrency-focused targeting. The report warns that AI is sharply compressing defender response time, with **88%** of vulnerabilities reportedly weaponized within **48 hours**, reducing effective patch windows to roughly **24 to 48 hours**. CrowdStrike highlighted rapid post-disclosure exploitation by China-linked groups including **Vault Panda** and **Genesis Panda**, and described advanced AI-enabled tradecraft by North Korean actors such as **Famous Chollima**, including fake companies, AI-generated infrastructure, and trojanized repositories aimed at cryptocurrency, blockchain, and AI-focused development environments. It also cited expanding supply-chain risk, including **TeamPCP’s** compromise of more than **300** software dependencies in a single day and financially motivated activity such as **Altered Spider** stealing credentials and pivoting into cloud environments, underscoring how AI tools and integrations are widening an under-defended attack surface.
Aug 11, 2026
An AI-orchestrated offensive framework called **CyberStrikeAI** has moved from a public GitHub release to apparent operational use by threat actors, highlighting how artificial intelligence is speeding up established attack techniques rather than replacing them. The framework reportedly combines more than 100 tools for reconnaissance, exploitation, and reporting under an orchestration layer that automates multi-step intrusion chains, and researchers said they observed at least 21 unique IP addresses running related infrastructure in early 2026. One reported incident linked the tool to a successful attack against **Fortinet FortiGate** appliances, reinforcing concerns that internet-facing edge devices such as firewalls and VPN systems remain attractive targets because they are often under-patched and lightly monitored. Broader reporting indicates AI is amplifying multiple attack categories at once, including social engineering, vulnerability exploitation, authentication attacks, and side-channel techniques, while also creating a growing attack surface around AI systems themselves. Security researchers and industry observers warn that AI-enabled phishing, deepfakes, automated vulnerability discovery, prompt injection, data poisoning, jailbreaking, model manipulation, API abuse, and malicious models are making attacks faster and more scalable. The trend underscores the need for organizations to verify exploitability, accelerate remediation of exposed assets, and continuously test defenses as offensive operations become more autonomous.
Jun 29, 2026
Organizations are facing expanding AI-related attack surface from *shadow AI* adoption and proliferating machine identities, with unsanctioned AI tools and integrations increasing data access pathways, identity-to-application trust relationships, and third-/fourth-party dependencies. Commentary and executive guidance pieces emphasize that visibility alone is insufficient as AI-driven automation accelerates operational change faster than governance, and that defenders should expect new roles, shared responsibility across teams, and increased reliance on automation to manage AI risk. Separately, threat intelligence reporting tied to recent intrusions against **Fortinet FortiGate** devices says attackers have weaponized **CyberStrikeAI**, a new open-source AI security testing platform that bundles 100+ tools with an AI decision engine to automate intrusion workflows. Team Cymru reported CyberStrikeAI activity from 21 unique IPs (Jan. 20–Feb. 26), including infrastructure linked to communications with breached FortiGate devices, with much of the hosting observed in China, Singapore, and Hong Kong and additional nodes in the U.S., Europe, and Japan; the activity was assessed as associated with **Chinese state-sponsored** operations, and the developer was linked to other AI-assisted offensive projects (e.g., *PrivHunterAI*, *InfiltrateX*).
Jun 29, 2026