INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Chinese hackers combine AI agent escalates global cyber attacks via networks

| 2026-11-04 13:22 MEDIUM HIGH AI-ENABLED ATTACK · AUTONOMOUS STATE-SPONSORED & ESPIONAGE
JSON
Executive Summary
AI-generated
CrowdStrike has identified a sophisticated threat actor organization, known as VAPOR PANDA, which leverages large language models (LLM) and AI agent frameworks to conduct simultaneous cyber espionage activities globally. The attack began on October 17, 2026, and lasted for 11 days, targeting diplomatic missions and key institutions in at least 14 countries in Central and South America, Europe, Asia, and the Middle East, using a combination of the Chinese-developed DeepSeek and ARTEX frameworks. The attack affected over 200 individual organizations, including US-based semiconductor, pharmaceutical, defense, and think tank organizations, as well as major telecommunications companies in each country.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
ShadowPadShadowPad
Target & Sectors
EUROPE EUROPE LATAM LATAM MIDDLE_EAST MIDDLE_EAST NORTH_AMERICA NORTH_AMERICA energyenergy defensedefense financefinance telecommunicationstelecommunications governmentgovernment pharmaceuticalpharmaceutical legallegal
Incident Timeline
‎May 2024
The Chinese hacker group used recovered VPN configurations and a stolen VPN client key from an email leak to access the internal network.
‎October 17, 2026
Threat actors, identified as Vapor Panda and utilizing the AI tool BLOODALCHEMY in combination with Chinese-developed frameworks, launched a 11-day global cyber attack targeting over 200 distinct organizations across multiple regions starting October 17, 2026.
target_region MIDDLE_EAST
The attack began on October 17, 2026, and lasted for 11 days, targeting diplomatic missions and key institutions in at least 14 countries in Central and South America, Europe, Asia, and the Middle East, using a combination of the Chinese-developed DeepSeek and ARTEX frameworks.
Starting October 17, 2026, Vapor Panda is said to have used the AI tool against more than 200 distinct organizations across the world, including foreign ministries in Latin America, Europe, Asia, and the Middle East; semiconductor, defense, and think tank organizations in the U.S.; and telecommunications providers in multiple regions.
target_region EUROPE
The attack began on October 17, 2026, and lasted for 11 days, targeting diplomatic missions and key institutions in at least 14 countries in Central and South America, Europe, Asia, and the Middle East, using a combination of the Chinese-developed DeepSeek and ARTEX frameworks.
Starting October 17, 2026, Vapor Panda is said to have used the AI tool against more than 200 distinct organizations across the world, including foreign ministries in Latin America, Europe, Asia, and the Middle East; semiconductor, defense, and think tank organizations in the U.S.; and telecommunications providers in multiple regions.
target_region LATAM
The attack began on October 17, 2026, and lasted for 11 days, targeting diplomatic missions and key institutions in at least 14 countries in Central and South America, Europe, Asia, and the Middle East, using a combination of the Chinese-developed DeepSeek and ARTEX frameworks.
Starting October 17, 2026, Vapor Panda is said to have used the AI tool against more than 200 distinct organizations across the world, including foreign ministries in Latin America, Europe, Asia, and the Middle East; semiconductor, defense, and think tank organizations in the U.S.; and telecommunications providers in multiple regions.
victims 200 individual organizations
Starting October 17, 2026, Vapor Panda is said to have used the AI tool against more than 200 distinct organizations across the world, including foreign ministries in Latin America, Europe, Asia, and the Middle East; semiconductor, defense, and think tank organizations in the U.S.; and telecommunications providers in multiple regions.
The attack affected over 200 individual organizations, including US-based semiconductor, pharmaceutical, defense, and think tank organizations, as well as major telecommunications companies in each country.
industry Pharmaceutical
General Document Context
industry Telecommunications
General Document Context
industry Finance
General Document Context
industry Defense
General Document Context
industry Energy
General Document Context
industry Legal
General Document Context
industry Government
General Document Context
general_metric 14 countries
The attack began on October 17, 2026, and lasted for 11 days, targeting diplomatic missions and key institutions in at least 14 countries in Central and South America, Europe, Asia, and the Middle East, using a combination of the Chinese-developed DeepSeek and ARTEX frameworks.
organisation BLOODALCHEMY
Attackers have targeted organizations in the Middle East and South America with the 'BLOODALCHEMY' backdoor.
infrastructure Windows
Notably, CrowdStrike's Falcon sensors were not installed on a Windows system that was discovered during the attack, prompting the agent workflow to include a direct command to evade security detection.
organisation Falcon
Notably, CrowdStrike's Falcon sensors were not installed on a Windows system that was discovered during the attack, prompting the agent workflow to include a direct command to evade security detection.
organisation CloudStrike
CloudStrike has explained that even small-scale attack groups can use AI-based frameworks to carry out simultaneous large-scale attacks on multiple high-value targets.
‎2026/11/04
Chinese state-sponsored threat actors, tracked as Vapor Panda and leveraging an AI-powered penetration testing framework called ARTEX, have conducted simultaneous cyber espionage activities globally targeting over 200 organizations worldwide.
organisation CrowdStrike
CrowdStrike has identified a sophisticated threat actor organization, known as VAPOR PANDA, which leverages large language models (LLM) and AI agent frameworks to conduct simultaneous cyber espionage activities globally.
…e, justice, finance, and intelligence entities 19 U.S.-based organizations in the pharmaceutical, semiconductor, defense, nuclear, and financial sectors Telecommunications providers in the U.S., Belgium, and the Philippines Post-exploitation activity has been confirmed at nine organizations, allowing the attacker to deploy BLOODALCHEMY , a derivative of ShadowPad, followed by credential…
organisation VAPOR PANDA
CrowdStrike has identified a sophisticated threat actor organization, known as VAPOR PANDA, which leverages large language models (LLM) and AI agent frameworks to conduct simultaneous cyber espionage activities globally.
victims 19 U.S.-based organizations
…e, justice, finance, and intelligence entities 19 U.S.-based organizations in the pharmaceutical, semiconductor, defense, nuclear, and financial sectors Telecommunications providers in the U.S., Belgium, and the Philippines Post-exploitation activity has been confirmed at nine organizations, allowing the attacker to deploy BLOODALCHEMY , a derivative of ShadowPad, followed by credential…
victims 12 additional organizations
Vapor Panda is also said to have conducted password-spraying and credential-scanning activity against at least 12 additional organizations, including U.S.-based think tanks and government entities in Europe.
organisation Hollow Panda
One of Many Panda Threat Clusters The disclosure also coincides with the emergence of four previously undocumented China-linked state-sponsored threat groups known as Hollow Panda, Overcast Panda, Titan Panda, and Veiled Panda, which have targeted a broad range of sectors across the world for intelligence gathering and intellectual property theft.
organisation Overcast Panda
Overcast Panda, described as "one of the most operationally sophisticated and persistent threats facing organizations with personnel traveling to China," has been linked to close access intrusions in which the adversary has deployed their proprietary FlowCloud backdoor on victims' devices via direct physical access when those targets were in the country.
organisation FlowCloud
Overcast Panda, described as "one of the most operationally sophisticated and persistent threats facing organizations with personnel traveling to China," has been linked to close access intrusions in which the adversary has deployed their proprietary FlowCloud backdoor on victims' devices via direct physical access when those targets were in the country.
organisation Target
Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide.
organisation VexatiousTemper
The activity has been attributed by CrowdStrike to a China-based "targeted intrusion adversary" it tracks under the moniker Vapor Panda (previously VexatiousTemper).
organisation LLM
"It orchestrates multiple LLM backends to autonomously perform reconnaissance, vulnerability identification, and exploitation, significantly lowering the technical barrier for conducting complex intrusion campaigns," Zscaler ThreatLabz said in a report published earlier this month.
organisation Zscaler ThreatLabz
"It orchestrates multiple LLM backends to autonomously perform reconnaissance, vulnerability identification, and exploitation, significantly lowering the technical barrier for conducting complex intrusion campaigns," Zscaler ThreatLabz said in a report published earlier this month.
organisation Local Administrator Password Solution
Deploying web shells, abusing an unauthenticated orchestration service to obtain root access in a production container environment, reading Local Administrator Password Solution (LAPS) passwords, and leveraging resource-based constrained delegation to impersonate a privileged account.
organisation LAPS
Deploying web shells, abusing an unauthenticated orchestration service to obtain root access in a production container environment, reading Local Administrator Password Solution (LAPS) passwords, and leveraging resource-based constrained delegation to impersonate a privileged account.
organisation Intapp Time
" Titan Panda, on the other hand, has been observed targeting legal billing software by exploiting a hard-coded Internet Information Services (IIS) machine key vulnerability in Intapp Time Server to achieve remote code execution across law firms.
organisation ViewState
"How Titan Panda obtained the default machine keys is unknown, though IIS compromise of a legal entity running Intapp Time Server may have exposed the hard-coded keys in the application's configuration file, enabling ViewState deserialization attacks against any organization running default installations," CrowdStrike said.
organisation ARTEX
"Agentic tooling like ARTEX enables this scale of expansion at speed, allowing a small team to pursue a wider target set than manual operations would support, rather than a wholesale shift away from the adversary's established access-development mission," CrowdStrike said in a Thursday analysis.
organisation XML
Analysis of the recovered transcripts highlights the use of ARTEX in combination with tried-and-tested approaches - Chaining an unsigned Security Assertion Markup Language (SAML) assertion and an XML external entity (XXE) flaw to query the cloud Instance Metadata Service.
organisation Instance Metadata Service
Analysis of the recovered transcripts highlights the use of ARTEX in combination with tried-and-tested approaches - Chaining an unsigned Security Assertion Markup Language (SAML) assertion and an XML external entity (XXE) flaw to query the cloud Instance Metadata Service.
organisation DLL
FlowCloud is launched by means of DLL sideloading, with its components designed to fly under the radar and resist forensic analysis.
Tactical Metrics
Metrics
victims
200
Individual Organizations
The attack affected over 200 individual organizations, including US-based semiconductor, pharmaceutical, defense, and think tank organizations, as well as major telecommunications companies in each country.
Starting October 17, 2026, Vapor Panda is said to have used the AI tool against more than 200 distinct organizations across the world, including foreign ministries in Latin America, Europe, Asia, and the Middle East; semiconductor, defense, and think tank organizations in the U.S.; and telecommunications providers in multiple regions.
Metrics
infrastructure
‎Windows
Affected Product
Notably, CrowdStrike's Falcon sensors were not installed on a Windows system that was discovered during the attack, prompting the agent workflow to include a direct command to evade security detection.
Metrics
victims
19
U.S.-Based Organizations
…e, justice, finance, and intelligence entities 19 U.S.-based organizations in the pharmaceutical, semiconductor, defense, nuclear, and financial sectors Telecommunications providers in the U.S., Belgium, and the Philippines Post-exploitation activity has been confirmed at nine organizations, allowing the attacker to deploy BLOODALCHEMY , a derivative of ShadowPad, followed by credential…
Metrics
victims
12
Additional Organizations
Vapor Panda is also said to have conducted password-spraying and credential-scanning activity against at least 12 additional organizations, including U.S.-based think tanks and government entities in Europe.
Intelligence Sources
The Hacker News 2026-10-30
Dailysecu 2026-11-04