kyber.today

daily cyber × ai intelligence

← index

tagged

[hermes]

7 editions · 7 items

September 29, 2026

  • Carbonato botnet installs the open-source Hermes Agent framework unchanged on Docker daemons exposed without auth on port 2375, then overwrites its SOUL.md persona file with a 39-line prompt instructing the agent to take tasks over Telegram, maintain persistence and prioritise AI API keys. It scans neighbouring networks every five minutes, launches privileged containers, and tunnels reverse SSH to a relay in Costa Rica (The Hacker News, Dark Reading). Continues from our earlier note on the campaign (earlier coverage). · Threat Activity

in PitScaler Goes Global: Citrix NetScaler Chain Exploited for Weeks Before Anyone Had a Patch

September 27, 2026

  • Gambit's numbers on the agentic e-commerce campaign are now public, adding hard denominators to the story we covered on 23 September. A Chinese-speaking, financially motivated actor ran Strix 146 times in deep mode against 138 hosts between 23–31 August (via OpenRouter on GLM 5.2 and DeepSeek v4 Pro), handed the reports to Cairn for 105 attack projects between 10–15 September on DeepSeek v4.1 Flash, and used Hermes with a Chinese system persona and 121 skills (78 of them attack skills) on Anthropic's opus-4.6 for orchestration. At least 27 companies compromised in that five-day window, over 600,000 unexpired credit cards stolen from two of them, skimmers injected into five stores, and 1,951 human-typed prompts across 260 sessions — a few short Chinese instructions per target (SecurityWeek). Danny Chez's follow-up pivots the hunt from rotating C2 domains to the injected code's packer characteristics, expanding from one observed injection to 50+ shops (write-up). · Threat Activity

in Citrix NetScaler Zero-Days Land Mid-Weekend, No Patch Until Next Week

September 14, 2026

  • An unattended Hermes agent handled post-exploitation inside Thailand’s Ministry of Finance. From July 9–13, 2026, Hunt.io found three exposed attacker directories containing exploit code, webshells, suo5 tunnels, scripts with hard-coded stolen credentials, and Hermes logs. Those logs showed the agent in approval-disabled “YOLO” mode enumerating ministry hosts, traversing files, and collecting LinPEAS output from an adjacent system. Active session cookies, deployed webshells, and internal-network access indicate compromise of multiple systems, although the initial-access path remains unknown and deployment of two staged WAR files was not confirmed. Recovered Windows and Linux samples belonged to the same custom Go implant, which the operator called Hades, and contained hard-coded C2 addresses. · AI-Enabled Threat Activity

in Hermes Logs Reveal Unattended AI Post-Exploitation

August 31, 2026

  • Popular AI coding assistants reportedly pulled suspicious code into corporate networks, per research covered by TechRadar naming Claude, Codex and Hermes tooling (TechRadar). Detail is thin, but agent-installed dependencies are an install-time supply-chain surface most software inventories do not cover. · AI & Model Security

in Fully Patched, Still Domain Admin

August 1, 2026

  • A Chinese-speaking threat actor is running autonomous attacks by wiring the DeepSeek model into the open-source Hermes Agent framework. Palo Alto Unit 42 reports that after a single Telegram instruction, the agent independently discovered internet-facing systems, selected public exploits, and ran the session with no further operator input; the operator is tracked under the aliases knaithe and KnYuan (BleepingComputer, The Hacker News). This is a concrete continuation of the Hermes-driven activity seen against Thailand's finance ministry. · AI & Offensive Security

in When the Attacker Is a Model: AI Lands on Both Sides of the Fight