AI安全专题周报（20261106）
报告编号：TIC-202611-AI01
报告周期：2026年10月31日—11月6日
一、报告概述
基于360威胁情报中心对本期公开网络安全情报的整理与分析，本期收录8项AI安全事件。实际攻击已涉及自动搜寻云凭据、利用智能体推进域内入侵，以及利用大模型筛选被窃取的资产。与此同时，模型访问凭据被用于转售推理额度，智能体平台的身份认证、工具授权和沙箱隔离也暴露出具体缺陷。
报告重点内容涵盖：
· AI辅助入侵与窃密：微软、Check Point和卡巴斯基分别从云审计、攻击者控制台和失陷主机观察到智能体参与攻击。VOLTA把大模型接入窃密后的资产评估流程。
· 模型资源盗用：攻击者利用网关聚合被盗API额度，转售模型访问权限，受害企业承担异常推理支出。
· AI应用的安全边界：ChatGPT锁定模式出现研究复现的绕过路径，AgentScope和Dify的认证、授权及执行链需要分别核查。
───────────────────────────────────
二、本周重点安全事件
（一）AI智能体搜寻泄露凭据并入侵云环境
事件名称：微软披露智能体自动搜寻并滥用暴露的应用凭据
发布日期：2026-11-05
发布机构：Microsoft Threat Intelligence
威胁概述：
微软自2026年8月起观察到攻击者使用智能体框架在GitHub批量搜索目标组织的云服务密钥。10月28日起，攻击者使用泄露的应用凭据登录多个Microsoft Entra ID租户。调查涉及供应商持有的多租户应用凭据被盗并用于访问下游客户环境。失陷服务主体随后枚举订阅和模型部署，读取存储密钥及应用配置，并访问部分租户的SharePoint、OneDrive和邮箱数据。
攻击链中可见自动调整请求的行为。例如，一批Azure Key Vault枚举请求返回错误后，攻击者约28秒内更换API版本重新发起请求并获得成功响应。微软还记录到一起从搜索客户端密钥到导出Key Vault数据约用5分钟的案例。处置时应撤销受影响应用的客户端密钥、证书和联合凭据，并按应用原有权限范围核查密钥读取、文件下载及下游租户访问记录。
IOC指标：
· IP：199.19.77.84
STIX详情：
{
"id": "bundle--bb4c8125-e35e-47c6-b5f6-d66ac1b786d4",
"objects": [
{
"created": "2026-11-06T04:36:36Z",
"description": "实施攻击的未具名威胁行为者",
"id": "intrusion-set--1d30200e-0fd6-46fb-aa22-ac3d52fc60c3",
"modified": "2026-11-06T04:36:36Z",
"name": "Unnamed Threat Actor",
"spec_version": "2.1",
"type": "intrusion-set",
"x_confidence": 0.9,
"x_evidence": "原文称 Threat actors use agentic AI tooling to find and abuse exposed secrets"
},
{
"created": "2026-11-06T04:36:36Z",
"description": "代理型进攻性AI安全框架，被威胁攻击者用于在GitHub中搜索敏感信息",
"id": "tool--4474b4de-63d7-4be4-a5fa-84b9f640713c",
"modified": "2026-11-06T04:36:36Z",
"name": "ARTEX",
"spec_version": "2.1",
"type": "tool",
"x_confidence": 0.98,
"x_evidence": "原文称 Threat actors use the agentic offensive security framework ARTEX"
},
{
"created": "2026-11-06T04:36:36Z",
"description": "ARTEX默认集成的网络扫描和渗透测试工具",
"id": "tool--70bb0cfc-5e0a-4a64-9c71-a757bbd005fa",
"modified": "2026-11-06T04:36:36Z",
"name": "Nmap",
"spec_version": "2.1",
"type": "tool",
"x_confidence": 0.93,
"x_evidence": "原文称 ARTEX by default uses Nmap"
},
{
"created": "2026-11-06T04:36:36Z",
"description": "ARTEX使用的HTTP请求工具",
"id": "tool--abc236a1-c8ec-4865-a88a-5a79b803c469",
"modified": "2026-11-06T04:36:36Z",
"name": "curl",
"spec_version": "2.1",
"type": "tool",
"x_confidence": 0.93,
"x_evidence": "原文称 ARTEX by default uses curl"
},
{
"created": "2026-11-06T04:36:36Z",
"description": "ARTEX使用的下载工具",
"id": "tool--028584e1-53b3-48e2-bdde-7ebd15ca0442",
"modified": "2026-11-06T04:36:36Z",
"name": "wget",
"spec_version": "2.1",
"type": "tool",
"x_confidence": 0.93,
"x_evidence": "原文称 ARTEX by default uses wget"
},
{
"created": "2026-11-06T04:36:36Z",
"description": "ARTEX使用的SDK用于网络获取",
"id": "tool--19a7da09-605e-4c4d-aeca-c02cbd1e39b1",
"modified": "2026-11-06T04:36:36Z",
"name": "Norma SDK WebFetch",
"spec_version": "2.1",
"type": "tool",
"x_confidence": 0.93,
"x_evidence": "原文称 ARTEX by default uses Norma SDK WebFetch"
},
{
"created": "2026-11-06T04:36:36Z",
"description": "用于无头Chromium浏览器操作的框架，被ARTEX所用",
"id": "tool--962722a5-3d1b-4ab6-bee2-fe6cfb8e39e3",
"modified": "2026-11-06T04:36:36Z",
"name": "Playwright",
"spec_version": "2.1",
"type": "tool",
"x_confidence": 0.93,
"x_evidence": "原文称 ARTEX by default uses headless Chromium through Playwright"
},
{
"created": "2026-11-06T04:36:36Z",
"description": "原文标记恶意登录IP，滥用泄露凭据",
"id": "ipv4-addr--8dc71616-fd6d-47a6-99e5-b07840430737",
"modified": "2026-11-06T04:36:36Z",
"name": "199.19.77.84",
"spec_version": "2.1",
"type": "ipv4-addr",
"x_confidence": 0.98,
"x_evidence": "原文称 Microsoft began observing successful service principal sign-ins from the IP address 199.19.77[.]84"
},
{
"created": "2026-11-06T04:36:36Z",
"description": "原文明确恶意操作IP，漏洞利用",
"id": "ipv4-addr--e55f8aeb-d2f3-4b3b-8807-7d9474fd3034",
"modified": "2026-11-06T04:36:36Z",
"name": "65.87.223.26",
"spec_version": "2.1",
"type": "ipv4-addr",
"x_confidence": 0.96,
"x_evidence": "原文称 We identified malicious operations from 65.87.223[.]26, including indications of vulnerability exploitation"
},
{
"created": "2026-11-06T04:36:36Z",
"description": "侦察Azure AI工作负载IP",
"id": "ipv4-addr--838f45e4-2a70-45f6-b004-cb65dc2691ce",
"modified": "2026-11-06T04:36:36Z",
"name": "157.22.126.128",
"spec_version": "2.1",
"type": "ipv4-addr",
"x_confidence": 0.93,
"x_evidence": "原文称 Microsoft observed reconnaissance operations from 157.22.126[.]128 targeting AI workloads"
},
{
"created": "2026-11-06T04:36:36Z",
"description": "攻击者进行公共仓库secret扫描的代码托管平台",
"id": "infrastructure--8be2bdea-7563-4cfc-b4d0-9e1e6d8d9c99",
"modified": "2026-11-06T04:36:36Z",
"name": "GitHub",
"spec_version": "2.1",
"type": "infrastructure",
"x_confidence": 0.95,
"x_evidence": "原文称 threat actors search public GitHub repositories for exposed secrets"
},
{
"created": "2026-11-06T04:36:36Z",
"description": "用于存储密钥、secrets和凭据的Azure服务，攻击者从中外泄数据",
"id": "infrastructure--626450c8-812e-4853-ae95-7752d3984a64",
"modified": "2026-11-06T04:36:36Z",
"name": "Azure Key Vault",
"spec_version": "2.1",
"type": "infrastructure",
"x_confidence": 0.97,
"x_evidence": "原文称 agents exfiltrated secrets from Azure Key Vault"
},
{
"created": "2026-11-06T04:36:36Z",
"description": "存储账户密钥等凭据相关的Azure存储服务",
"id": "infrastructure--773da656-3469-42de-ad48-d457d7a862a6",
"modified": "2026-11-06T04:36:36Z",
"name": "Azure Storage Account",
"spec_version": "2.1",
"type": "infrastructure",
"x_confidence": 0.92,
"x_evidence": "原文称 credential and data exfiltration, including from Azure Key Vaults and Storage Accounts"
},
{
"created": "2026-11-06T04:36:36Z",
"description": "攻击者访问并下载文件的目标协作平台",
"id": "infrastructure--9a4be7f6-5811-409b-98bb-99856a6c050e",
"modified": "2026-11-06T04:36:36Z",
"name": "SharePoint",
"spec_version": "2.1",
"type": "infrastructure",
"x_confidence": 0.93,
"x_evidence": "原文称 compromised applications subsequently accessed SharePoint, including file downloads"
},
{
"created": "2026-11-06T04:36:36Z",
"description": "攻击者访问并下载文件的目标云存储服务",
"id": "infrastructure--c4a6bf39-b1e8-4693-b6cc-adb1468544b9",
"modified": "2026-11-06T04:36:36Z",
"name": "OneDrive",
"spec_version": "2.1",
"type": "infrastructure",
"x_confidence": 0.92,
"x_evidence": "原文称 compromised applications subsequently accessed OneDrive, including file downloads"
},
{
"created": "2026-11-06T04:36:36Z",
"description": "攻击者通过Run Command运行脚本的虚拟机资源",
"id": "infrastructure--496339de-23ac-478d-9276-105bf574f0fe",
"modified": "2026-11-06T04:36:36Z",
"name": "Azure VM",
"spec_version": "2.1",
"type": "infrastructure",
"x_confidence": 0.9,
"x_evidence": "原文称 agents used the Run Command, which runs scripts in Azure VMs"
},
{
"created": "2026-11-06T04:36:36Z",
"description": "攻击者搜索secret的DevOps服务",
"id": "infrastructure--0fbc583d-772c-47a3-ab03-3852c995b6ce",
"modified": "2026-11-06T04:36:36Z",
"name": "Azure DevOps",
"spec_version": "2.1",
"type": "infrastructure",
"x_confidence": 0.92,
"x_evidence": "原文称 agents once authenticated have also searched Azure DevOps for secrets"
},
{
"created": "2026-11-06T04:36:36Z",
"description": "攻击者侦察并可能滥用的AI服务资源",
"id": "infrastructure--d47fcbed-466d-45ec-9cbe-fc45ba36a398",
"modified": "2026-11-06T04:36:36Z",
"name": "Azure AI Service",
"spec_version": "2.1",
"type": "infrastructure",
"x_confidence": 0.9,
"x_evidence": "原文称 reconnaissance operations from 157.22.126[.]128 targeting AI workloads deployed by victims on Azure AI services"
},
{
"created": "2026-11-06T04:36:36Z",
"description": "攻击者通过ARM查询其端点并获取相关凭据的监控服务",
"id": "infrastructure--94bf3924-5836-40ef-822e-5069ed83044b",
"modified": "2026-11-06T04:36:36Z",
"name": "Application Insights",
"spec_version": "2.1",
"type": "infrastructure",
"x_confidence": 0.88,
"x_evidence": "原文称 An ARM POST request to an Application Insights query endpoint"
},
{
"aliases": [
"AKS"
],
"created": "2026-11-06T04:36:36Z",
"description": "攻击者获取用户凭据的Kubernetes服务",
"id": "infrastructure--8d0329e1-8f9b-4e1b-bd4b-04a7a192fe27",
"modified": "2026-11-06T04:36:36Z",
"name": "Azure Kubernetes Service",
"spec_version": "2.1",
"type": "infrastructure",
"x_confidence": 0.9,
"x_evidence": "原文称 attackers targeted operations, including Azure Kubernetes Service (AKS) user credentials"
},
{
"created": "2026-11-06T04:36:36Z",
"description": "攻击者枚举服务器防火墙规则的数据库服务",
"id": "infrastructure--3946af20-e168-40da-8eda-d34c8ba86f28",
"modified": "2026-11-06T04:36:36Z",
"name": "Azure SQL",
"spec_version": "2.1",
"type": "infrastructure",
"x_confidence": 0.88,
"x_evidence": "原文称 A GET request to enumerate an Azure SQL server’s firewall rules"
},
{
"created": "2026-11-06T04:36:36Z",
"description": "攻击者获取设置和身份验证令牌等相关目标",
"id": "infrastructure--4c623f65-203b-4d99-81ce-4b8fdc528eb5",
"modified": "2026-11-06T04:36:36Z",
"name": "App Service",
"spec_version": "2.1",
"type": "infrastructure",
"x_confidence": 0.9,
"x_evidence": "原文称 attempts to obtain App Service authentication tokens"
},
{
"aliases": [
"Entra ID"
],
"created": "2026-11-06T04:36:36Z",
"description": "受害组织的身份和访问管理服务，被攻击者访问",
"id": "infrastructure--5b1352b8-08b5-442d-80c7-0d4c95e1aa55",
"modified": "2026-11-06T04:36:36Z",
"name": "Microsoft Entra ID",
"spec_version": "2.1",
"type": "infrastructure",
"x_confidence": 0.96,
"x_evidence": "原文称 agentic framework used valid leaked or stolen application credentials to access Microsoft Entra ID tenants"
},
{
"aliases": [
"ARM"
],
"created": "2026-11-06T04:36:36Z",
"description": "攻击者进行云API自适应操作的Azure资源管理平面",
"id": "infrastructure--aa759954-51c1-4ebc-ad2f-4060122f7a89",
"modified": "2026-11-06T04:36:36Z",
"name": "Azure Resource Manager",
"spec_version": "2.1",
"type": "infrastructure",
"x_confidence": 0.95,
"x_evidence": "原文称 agent’s operations on a victim’s Azure Resource Manager (ARM) instance"
},
{
"created": "2026-11-06T04:36:36Z",
"description": "威胁行为者使用ARTEX作为核心执行体",
"id": "relationship--69bb328b-e6c9-4932-81cb-f27e310575c9",
"modified": "2026-11-06T04:36:36Z",
"relationship_type": "uses",
"source_ref": "intrusion-set--1d30200e-0fd6-46fb-aa22-ac3d52fc60c3",
"spec_version": "2.1",
"target_ref": "tool--4474b4de-63d7-4be4-a5fa-84b9f640713c",
"type": "relationship",
"x_confidence": 0.97,
"x_evidence": "原文称 Microsoft Threat Intelligence has observed threat actors using an agentic AI offensive framework"
},
{
"created": "2026-11-06T04:36:36Z",
"description": "ARTEX默认集成Nmap用于网络扫描",
"id": "relationship--6f72a315-d5d4-469b-ab9f-5906406acb16",
"modified": "2026-11-06T04:36:36Z",
"relationship_type": "uses",
"source_ref": "tool--4474b4de-63d7-4be4-a5fa-84b9f640713c",
"spec_version": "2.1",
"target_ref": "tool--70bb0cfc-5e0a-4a64-9c71-a757bbd005fa",
"type": "relationship",
"x_confidence": 0.95,
"x_evidence": "原文称 ARTEX by default uses Nmap"
},
{
"created": "2026-11-06T04:36:36Z",
"description": "ARTEX默认集成curl用于HTTP请求",
"id": "relationship--3dc39e16-662f-491e-b33e-166932b124e9",
"modified": "2026-11-06T04:36:36Z",
"relationship_type": "uses",
"source_ref": "tool--4474b4de-63d7-4be4-a5fa-84b9f640713c",
"spec_version": "2.1",
"target_ref": "tool--abc236a1-c8ec-4865-a88a-5a79b803c469",
"type": "relationship",
"x_confidence": 0.95,
"x_evidence": "原文称 ARTEX by default uses curl"
},
{
"created": "2026-11-06T04:36:36Z",
"description": "ARTEX默认集成wget用于下载",
"id": "relationship--d033f286-3502-453e-aec1-a85b9dc6805c",
"modified": "2026-11-06T04:36:36Z",
"relationship_type": "uses",
"source_ref": "tool--4474b4de-63d7-4be4-a5fa-84b9f640713c",
"spec_version": "2.1",
"target_ref": "tool--028584e1-53b3-48e2-bdde-7ebd15ca0442",
"type": "relationship",
"x_confidence": 0.95,
"x_evidence": "原文称 ARTEX by default uses wget"
},
{
"created": "2026-11-06T04:36:36Z",
"description": "ARTEX默认集成Norma SDK WebFetch用于网络获取",
"id": "relationship--4458bab9-536e-439a-8ea1-20ee682741d6",
"modified": "2026-11-06T04:36:36Z",
"relationship_type": "uses",
"source_ref": "tool--4474b4de-63d7-4be4-a5fa-84b9f640713c",
"spec_version": "2.1",
"target_ref": "tool--19a7da09-605e-4c4d-aeca-c02cbd1e39b1",
"type": "relationship",
"x_confidence": 0.95,
"x_evidence": "原文称 ARTEX by default uses Norma SDK WebFetch"
},
{
"created": "2026-11-06T04:36:36Z",
"description": "ARTEX通过Playwright操作无头Chromium",
"id": "relationship--1fd5dd34-e369-4996-8778-e812ef48a9ca",
"modified": "2026-11-06T04:36:36Z",
"relationship_type": "uses",
"source_ref": "tool--4474b4de-63d7-4be4-a5fa-84b9f640713c",
"spec_version": "2.1",
"target_ref": "tool--962722a5-3d1b-4ab6-bee2-fe6cfb8e39e3",
"type": "relationship",
"x_confidence": 0.95,
"x_evidence": "原文称 ARTEX by default uses headless Chromium through Playwright"
},
{
"created": "2026-11-06T04:36:36Z",
"description": "攻击者从恶意IP 199.19.77.84进行服务主体登录",
"id": "relationship--1c6ce35a-5920-4a61-8de2-a2854d92f7bd",
"modified": "2026-11-06T04:36:36Z",
"relationship_type": "uses",
"source_ref": "intrusion-set--1d30200e-0fd6-46fb-aa22-ac3d52fc60c3",
"spec_version": "2.1",
"target_ref": "ipv4-addr--8dc71616-fd6d-47a6-99e5-b07840430737",
"type": "relationship",
"x_confidence": 0.98,
"x_evidence": "原文称 Microsoft began observing successful service principal sign-ins from the IP address 199.19.77[.]84"
},
{
"created": "2026-11-06T04:36:36Z",
"description": "攻击者使用IP 65.87.223.26进行恶意操作和漏洞利用",
"id": "relationship--dfdf8e60-1cfe-4074-9b31-0f4e3dfc34e5",
"modified": "2026-11-06T04:36:36Z",
"relationship_type": "uses",
"source_ref": "intrusion-set--1d30200e-0fd6-46fb-aa22-ac3d52fc60c3",
"spec_version": "2.1",
"target_ref": "ipv4-addr--e55f8aeb-d2f3-4b3b-8807-7d9474fd3034",
"type": "relationship",
"x_confidence": 0.96,
"x_evidence": "原文称 malicious operations from 65.87.223[.]26, including vulnerability exploitation"
},
{
"created": "2026-11-06T04:36:36Z",
"description": "攻击者使用IP 157.22.126.128对Azure AI工作负载进行侦察",
"id": "relationship--63ecb1b8-17dc-4c14-b41e-df4cd429fe0d",
"modified": "2026-11-06T04:36:36Z",
"relationship_type": "uses",
"source_ref": "intrusion-set--1d30200e-0fd6-46fb-aa22-ac3d52fc60c3",
"spec_version": "2.1",
"target_ref": "ipv4-addr--838f45e4-2a70-45f6-b004-cb65dc2691ce",
"type": "relationship",
"x_confidence": 0.93,
"x_evidence": "原文称 reconnaissance operations from 157.22.126[.]128 targeting AI workloads"
},
{
"created": "2026-11-06T04:36:36Z",
"description": "ARTEX使用GitHub公共仓库进行secret扫描",
"id": "relationship--407069fd-93df-4603-ac19-b3087352bf95",
"modified": "2026-11-06T04:36:36Z",
"relationship_type": "uses",
"source_ref": "tool--4474b4de-63d7-4be4-a5fa-84b9f640713c",
"spec_version": "2.1",
"target_ref": "infrastructure--8be2bdea-7563-4cfc-b4d0-9e1e6d8d9c99",
"type": "relationship",
"x_confidence": 0.95,
"x_evidence": "原文称 threat actors using ARTEX to search GitHub for OAuth application secrets"
},
{
"created": "2026-11-06T04:36:36Z",
"description": "攻击者从Azure Key Vault外泄secret并窃取凭据",
"id": "relationship--56f2ad20-c307-4480-a536-a46a5098683f",
"modified": "2026-11-06T04:36:36Z",
"relationship_type": "targets",
"source_ref": "intrusion-set--1d30200e-0fd6-46fb-aa22-ac3d52fc60c3",
"spec_version": "2.1",
"target_ref": "infrastructure--626450c8-812e-4853-ae95-7752d3984a64",
"type": "relationship",
"x_confidence": 0.97,
"x_evidence": "原文称 agents exfiltrated secrets from the organization’s Azure Key Vault"
},
{
"created": "2026-11-06T04:36:36Z",
"description": "攻击目标包括窃取存储账户密钥等凭据",
"id": "relationship--3f5f3c33-c994-4069-871f-b7656c86d89b",
"modified": "2026-11-06T04:36:36Z",
"relationship_type": "targets",
"source_ref": "intrusion-set--1d30200e-0fd6-46fb-aa22-ac3d52fc60c3",
"spec_version": "2.1",
"target_ref": "infrastructure--773da656-3469-42de-ad48-d457d7a862a6",
"type": "relationship",
"x_confidence": 0.92,
"x_evidence": "原文称 credential and data exfiltration, including from Azure Key Vaults and Storage Accounts"
},
{
"created": "2026-11-06T04:36:36Z",
"description": "被攻陷的OAuth应用访问SharePoint并下载文件",
"id": "relationship--d93b4302-5a7e-48d9-8b1e-56eeed743a26",
"modified": "2026-11-06T04:36:36Z",
"relationship_type": "targets",
"source_ref": "intrusion-set--1d30200e-0fd6-46fb-aa22-ac3d52fc60c3",
"spec_version": "2.1",
"target_ref": "infrastructure--9a4be7f6-5811-409b-98bb-99856a6c050e",
"type": "relationship",
"x_confidence": 0.93,
"x_evidence": "原文称 compromised applications subsequently accessed SharePoint, including file downloads"
},
{
"created": "2026-11-06T04:36:36Z",
"description": "被攻陷的OAuth应用访问OneDrive并下载文件",
"id": "relationship--9699337d-68fa-4a20-a80b-94584f1ef08d",
"modified": "2026-11-06T04:36:36Z",
"relationship_type": "targets",
"source_ref": "intrusion-set--1d30200e-0fd6-46fb-aa22-ac3d52fc60c3",
"spec_version": "2.1",
"target_ref": "infrastructure--c4a6bf39-b1e8-4693-b6cc-adb1468544b9",
"type": "relationship",
"x_confidence": 0.93,
"x_evidence": "原文称 compromised applications subsequently accessed OneDrive, including file downloads"
},
{
"created": "2026-11-06T04:36:36Z",
"description": "攻击者利用Run Command在Azure VM上运行脚本，以访问凭据、持久化或横向移动",
"id": "relationship--401af86e-096f-4de4-a4bb-feff3e9d8ef0",
"modified": "2026-11-06T04:36:36Z",
"relationship_type": "targets",
"source_ref": "intrusion-set--1d30200e-0fd6-46fb-aa22-ac3d52fc60c3",
"spec_version": "2.1",
"target_ref": "infrastructure--496339de-23ac-478d-9276-105bf574f0fe",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文称 agents used the Run Command, which runs scripts in Azure VMs"
},
{
"created": "2026-11-06T04:36:36Z",
"description": "攻击者在认证后搜索Azure DevOps secret",
"id": "relationship--d68ecc44-894a-4f12-bf41-97c38e3e5460",
"modified": "2026-11-06T04:36:36Z",
"relationship_type": "targets",
"source_ref": "intrusion-set--1d30200e-0fd6-46fb-aa22-ac3d52fc60c3",
"spec_version": "2.1",
"target_ref": "infrastructure--0fbc583d-772c-47a3-ab03-3852c995b6ce",
"type": "relationship",
"x_confidence": 0.92,
"x_evidence": "原文称 agents once authenticated have also searched Azure DevOps for secrets"
},
{
"created": "2026-11-06T04:36:36Z",
"description": "攻击者对Azure AI服务上的AI工作负载进行侦察并可能滥用",
"id": "relationship--6a09ec2b-afe2-4aff-a946-12e3a09aaa8a",
"modified": "2026-11-06T04:36:36Z",
"relationship_type": "targets",
"source_ref": "intrusion-set--1d30200e-0fd6-46fb-aa22-ac3d52fc60c3",
"spec_version": "2.1",
"target_ref": "infrastructure--d47fcbed-466d-45ec-9cbe-fc45ba36a398",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文称 reconnaissance operations from 157.22.126[.]128 targeting AI workloads deployed by victims on Azure AI services"
},
{
"created": "2026-11-06T04:36:36Z",
"description": "攻击者通过ARM查询Application Insights端点并获取相关凭据",
"id": "relationship--5065f166-8905-44bb-b5c5-870cdb0d0aed",
"modified": "2026-11-06T04:36:36Z",
"relationship_type": "targets",
"source_ref": "intrusion-set--1d30200e-0fd6-46fb-aa22-ac3d52fc60c3",
"spec_version": "2.1",
"target_ref": "infrastructure--94bf3924-5836-40ef-822e-5069ed83044b",
"type": "relationship",
"x_confidence": 0.88,
"x_evidence": "原文称 An ARM POST request to an Application Insights query endpoint"
},
{
"created": "2026-11-06T04:36:36Z",
"description": "攻击者获取AKS用户凭据",
"id": "relationship--7bb7256c-7d84-421c-8a7e-c77035ae42f0",
"modified": "2026-11-06T04:36:36Z",
"relationship_type": "targets",
"source_ref": "intrusion-set--1d30200e-0fd6-46fb-aa22-ac3d52fc60c3",
"spec_version": "2.1",
"target_ref": "infrastructure--8d0329e1-8f9b-4e1b-bd4b-04a7a192fe27",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文称 attackers targeted operations, including Azure Kubernetes Service (AKS) user credentials"
},
{
"created": "2026-11-06T04:36:36Z",
"description": "攻击者枚举Azure SQL服务器防火墙规则",
"id": "relationship--baee6e93-56f5-4994-9407-2a77d00157bc",
"modified": "2026-11-06T04:36:36Z",
"relationship_type": "targets",
"source_ref": "intrusion-set--1d30200e-0fd6-46fb-aa22-ac3d52fc60c3",
"spec_version": "2.1",
"target_ref": "infrastructure--3946af20-e168-40da-8eda-d34c8ba86f28",
"type": "relationship",
"x_confidence": 0.88,
"x_evidence": "原文称 A GET request to enumerate an Azure SQL server’s firewall rules"
},
{
"created": "2026-11-06T04:36:36Z",
"description": "攻击者尝试获取App Service身份验证令牌",
"id": "relationship--e874c710-6e18-4e8b-865d-095cd27a28e3",
"modified": "2026-11-06T04:36:36Z",
"relationship_type": "targets",
"source_ref": "intrusion-set--1d30200e-0fd6-46fb-aa22-ac3d52fc60c3",
"spec_version": "2.1",
"target_ref": "infrastructure--4c623f65-203b-4d99-81ce-4b8fdc528eb5",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文称 attempts to obtain App Service authentication tokens"
},
{
"created": "2026-11-06T04:36:36Z",
"description": "攻击者访问多个受害者的Microsoft Entra ID租户",
"id": "relationship--7d12cd54-d842-41cf-88e9-01e58d8b242e",
"modified": "2026-11-06T04:36:36Z",
"relationship_type": "targets",
"source_ref": "intrusion-set--1d30200e-0fd6-46fb-aa22-ac3d52fc60c3",
"spec_version": "2.1",
"target_ref": "infrastructure--5b1352b8-08b5-442d-80c7-0d4c95e1aa55",
"type": "relationship",
"x_confidence": 0.96,
"x_evidence": "原文称 agentic framework used valid leaked or stolen application credentials to access Microsoft Entra ID tenants"
},
{
"created": "2026-11-06T04:36:36Z",
"description": "攻击者通过Azure Resource Manager执行云API操作",
"id": "relationship--45a5c08f-11f2-4131-ba44-6c37e48ce5d7",
"modified": "2026-11-06T04:36:36Z",
"relationship_type": "uses",
"source_ref": "intrusion-set--1d30200e-0fd6-46fb-aa22-ac3d52fc60c3",
"spec_version": "2.1",
"target_ref": "infrastructure--aa759954-51c1-4ebc-ad2f-4060122f7a89",
"type": "relationship",
"x_confidence": 0.95,
"x_evidence": "原文称 agent’s operations on a victim’s Azure Resource Manager (ARM) instance"
}
],
"spec_version": "2.1",
"type": "bundle"
}报告链接：
───────────────────────────────────
（二）ChatGPT锁定模式绕过
事件名称：绕过ChatGPT锁定模式：钓鱼、恶意软件投递和数据外传
发布日期：2026-11-05
发布机构：Check Point Research
威胁概述：
Check Point复现了ChatGPT锁定模式的安全边界绕过。该模式通过限制实时网页访问、远程图片、连接器及下载等能力来减少提示注入触发的出站请求。研究团队展示了受控条件下的对话数据外传、钓鱼和恶意软件投递路径，其中ChatGPT Classic的外传演示可在正常对话过程中触发，用户无需额外点击。
这项披露属于研究复现，所列场景的触发条件各不相同。企业若在AI会话中处理源代码、凭据或客户数据，应同时控制可进入模型上下文的内容以及运行环境能够访问的外部目的地。审查日志时，可关注处理外部内容后出现的意外下载、外部跳转和未经业务批准的出站访问。
IOC指标：
· 暂无公开IOC
报告链接：
───────────────────────────────────
（三）ARTEX被用于自动化网络犯罪
事件名称：自动驾驶的黑客攻击：揭秘ARTEX网络犯罪活动
发布日期：2026-11-05
发布机构：Check Point Research
威胁概述：
Check Point分析了10个因配置不当暴露数据库的ARTEX实例，从操作者指令、模型配置和任务记录中还原了多起逐利活动。攻击者通常先设定目标，再由智能体规划侦察、执行工具、重试利用并收集结果。研究记录的目标包括代码签名服务、游戏账号凭据和加密资产，利用路径涉及硬编码口令、缺少认证的接口及命令注入。
在代码签名服务案例中，智能体取得证书库后进一步验证口令、核对私钥是否匹配，并检查证书状态。签名私钥一旦泄露，影响可延伸到依赖该证书验证制品来源的下游用户。应重点监测管理接口被高频枚举、异常证书库读取和私钥批量导出。
IOC指标：
· 暂无公开IOC
STIX详情：
{
"id": "bundle--a57f27b2-d958-43e0-b322-ae22b9e01367",
"objects": [
{
"created": "2026-11-06T04:28:26Z",
"description": "使用 ARTEX 平台的各种网络犯罪分子/威胁行为者",
"id": "intrusion-set--b4603a10-fc43-4fef-81e1-8d843add171b",
"modified": "2026-11-06T04:28:26Z",
"name": "ARTEX Threat Actor",
"spec_version": "2.1",
"type": "intrusion-set",
"x_confidence": 0.8,
"x_evidence": "原文称 ARTEX 被 various cyber criminals 使用，threat actors 可无需技术知识开展攻击"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "AI-powered penetration testing platform",
"id": "tool--0d6d55ed-a03b-47e0-a7aa-287b41ea8945",
"modified": "2026-11-06T04:28:26Z",
"name": "ARTEX",
"spec_version": "2.1",
"type": "tool",
"x_confidence": 0.97,
"x_evidence": "原文：ARTEX is a Chinese open-source, AI-powered penetration testing platform"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "用于控制与数据回传的 ARTEX C&C 服务器集合",
"id": "infrastructure--35185fba-a2d4-4263-842b-8ac82da6f685",
"modified": "2026-11-06T04:28:26Z",
"name": "ARTEX C2 Infrastructure",
"spec_version": "2.1",
"type": "infrastructure",
"x_confidence": 0.9,
"x_evidence": "原文分析 C&C Infrastructure：full set of identified Command-and-Control domains and IPs"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "原文标注为 ARTEX C&C 服务器 IP",
"id": "ipv4-addr--aae03d52-bd65-4cfa-9525-84d7cad0bc75",
"modified": "2026-11-06T04:28:26Z",
"name": "192.236.172.197",
"spec_version": "2.1",
"type": "ipv4-addr",
"x_confidence": 0.95,
"x_evidence": "原文 C&C 表列出 192.236.172.197，属于 Rolling slug 集群"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "原文标注为 ARTEX C&C 服务器 IP",
"id": "ipv4-addr--41f752f9-f6af-4fc0-aa66-cb956bde7fa1",
"modified": "2026-11-06T04:28:26Z",
"name": "198.44.123.66",
"spec_version": "2.1",
"type": "ipv4-addr",
"x_confidence": 0.95,
"x_evidence": "原文 C&C 表列出 198.44.123.66，属于 Rolling slug 集群"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "原文标注为 ARTEX C&C 服务器 IP",
"id": "ipv4-addr--2481a55c-7d31-42b2-a78d-743a0b9eda09",
"modified": "2026-11-06T04:28:26Z",
"name": "204.44.66.81",
"spec_version": "2.1",
"type": "ipv4-addr",
"x_confidence": 0.95,
"x_evidence": "原文 C&C 表列出 204.44.66.81，属于 Rolling slug 集群"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "原文标注为 ARTEX C&C 服务器 IP",
"id": "ipv4-addr--fdf6c8dd-602a-46ad-ad65-0c44f29fa040",
"modified": "2026-11-06T04:28:26Z",
"name": "104.168.112.237",
"spec_version": "2.1",
"type": "ipv4-addr",
"x_confidence": 0.95,
"x_evidence": "原文 C&C 表列出 104.168.112.237，属于 Rolling slug 集群"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "原文标注为 ARTEX C&C 服务器 IP 范围起始",
"id": "ipv4-addr--d9c4f4d9-f859-489a-a56a-f0fbebdeb3a6",
"modified": "2026-11-06T04:28:26Z",
"name": "198.200.59.85",
"spec_version": "2.1",
"type": "ipv4-addr",
"x_confidence": 0.95,
"x_evidence": "原文 C&C 表列出 198.200.59.85-89，198.200.59.85 为范围起始"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "原文标注为 ARTEX C&C 服务器 IP",
"id": "ipv4-addr--efc5324a-4147-4ec8-89b2-c8b94d5b6a5a",
"modified": "2026-11-06T04:28:26Z",
"name": "103.122.245.194",
"spec_version": "2.1",
"type": "ipv4-addr",
"x_confidence": 0.95,
"x_evidence": "原文 C&C 表列出 103.122.245.194 等 IP，属于 Changing tag 集群"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "原文标注为 ARTEX C&C 服务器 IP 范围起始",
"id": "ipv4-addr--9934906b-8c15-43a3-9811-ff4726c4d58c",
"modified": "2026-11-06T04:28:26Z",
"name": "38.11.221.1",
"spec_version": "2.1",
"type": "ipv4-addr",
"x_confidence": 0.95,
"x_evidence": "原文 C&C 表列出 38.11.221.1-125，38.11.221.1 为范围起始"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "原文标注为 ARTEX C&C 服务器 IP 范围起始",
"id": "ipv4-addr--cc3ff752-001a-45ae-a506-96e98a4e670a",
"modified": "2026-11-06T04:28:26Z",
"name": "38.11.173.1",
"spec_version": "2.1",
"type": "ipv4-addr",
"x_confidence": 0.95,
"x_evidence": "原文 C&C 表列出 38.11.173.1-125，38.11.173.1 为范围起始"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "针对 Apple 证书的盗窃活动，获取 .p12 文件和密码，验证并获取可用证书",
"id": "campaign--4989a5ad-f381-4a20-bf54-396593f5dce3",
"modified": "2026-11-06T04:28:26Z",
"name": "Apple Certificate Theft Campaign",
"spec_version": "2.1",
"type": "campaign",
"x_confidence": 0.95,
"x_evidence": "原文 Campaign 1 – Apple Certificate Heist"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "针对加密货币支付基础设施域的渗透活动，尝试转移 USDT 并植入后门，但未实际窃取 USDT",
"id": "campaign--1673bfd9-f781-4025-9e36-c352bdaa07c8",
"modified": "2026-11-06T04:28:26Z",
"name": "Cryptocurrency Theft Campaign",
"spec_version": "2.1",
"type": "campaign",
"x_confidence": 0.95,
"x_evidence": "原文 Campaign 2 – Failed Crypto Draining Operation"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "针对王者荣耀凭证的盗窃活动，恢复超过 190,000 组凭证，约 6,000 个账号可被利用",
"id": "campaign--467101f0-e7ff-4f37-a11a-76ed4f6d627c",
"modified": "2026-11-06T04:28:26Z",
"name": "Game Account Theft Campaign",
"spec_version": "2.1",
"type": "campaign",
"x_confidence": 0.95,
"x_evidence": "原文 Campaign 3 – Gaming Account Theft"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "利用硬编码管理员密码，位于 SPA JavaScript bundles 中",
"id": "attack-pattern--b6d74d92-0287-4c59-91c6-90013f21e299",
"modified": "2026-11-06T04:28:26Z",
"name": "Hardcoded Admin Credentials in SPA JavaScript Bundles",
"spec_version": "2.1",
"type": "attack-pattern",
"x_confidence": 0.9,
"x_evidence": "原文：Hardcoded administrator passwords in SPA JavaScript bundles"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "利用缺失认证的 Web API 进行访问",
"id": "attack-pattern--f8256147-db21-4aa1-ba71-35d44dbbef76",
"modified": "2026-11-06T04:28:26Z",
"name": "Missing Authentication Web API",
"spec_version": "2.1",
"type": "attack-pattern",
"x_confidence": 0.9,
"x_evidence": "原文：Missing authentication on Web APIs"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "通过命令注入实现远程代码执行（RCE）",
"id": "attack-pattern--1236d6cd-3d6d-4de5-882f-4213a790b97c",
"modified": "2026-11-06T04:28:26Z",
"name": "RCE via Command Injection",
"spec_version": "2.1",
"type": "attack-pattern",
"x_confidence": 0.95,
"x_evidence": "原文：Remote Code Execution (RCE) through command injection"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "利用不安全直接对象引用（IDOR）漏洞",
"id": "attack-pattern--df0724af-d208-4a69-a541-68a4a0bddb1e",
"modified": "2026-11-06T04:28:26Z",
"name": "Insecure Direct Object Reference",
"spec_version": "2.1",
"type": "attack-pattern",
"x_confidence": 0.9,
"x_evidence": "原文：Insecure Direct Object References (IDOR)"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "利用弱管理员凭据",
"id": "attack-pattern--ac25f597-7c3e-4cc0-bddd-193595cca4e4",
"modified": "2026-11-06T04:28:26Z",
"name": "Weak Admin Credentials",
"spec_version": "2.1",
"type": "attack-pattern",
"x_confidence": 0.9,
"x_evidence": "原文：Weak administrative credentials"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "通过服务器端模板注入（SSTI）实现远程代码执行",
"id": "attack-pattern--e4027cd1-27bf-4437-bb54-414f97c56c38",
"modified": "2026-11-06T04:28:26Z",
"name": "RCE via Server-Side Template Injection",
"spec_version": "2.1",
"type": "attack-pattern",
"x_confidence": 0.9,
"x_evidence": "原文：RCE through Server Side Template Injection (SSTI)"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "Linux 主机上从低权限用户到 root 的权限提升，通过过度宽松的文件夹访问",
"id": "attack-pattern--b60b3267-2262-4e13-a1c9-6df96f46b5e5",
"modified": "2026-11-06T04:28:26Z",
"name": "Privilege Escalation via Permissive Folder Access",
"spec_version": "2.1",
"type": "attack-pattern",
"x_confidence": 0.9,
"x_evidence": "原文：privilege escalation on a Linux host from a low privileged user to root through overly permissive folder access"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "在前端 JavaScript bundles 和 HTML 源码中利用硬编码管理员凭据",
"id": "attack-pattern--7e398ccc-e195-4c06-a756-496060d59921",
"modified": "2026-11-06T04:28:26Z",
"name": "Hardcoded Admin Credentials in Frontend JavaScript and HTML Source",
"spec_version": "2.1",
"type": "attack-pattern",
"x_confidence": 0.9,
"x_evidence": "原文：hardcoded administrative credentials in frontend JavaScript bundles and HTML source code"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "直接访问存储于 web 根目录的明文静态凭证文件",
"id": "attack-pattern--e3c018bb-6fe9-4288-b67e-cfb6a20c5a9e",
"modified": "2026-11-06T04:28:26Z",
"name": "Direct Access to Plaintext Static Credential Files",
"spec_version": "2.1",
"type": "attack-pattern",
"x_confidence": 0.9,
"x_evidence": "原文：store all their credentials a static file in the web root, unprotected"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "利用未认证 Web API 泄露的 AWS S3 写入凭据",
"id": "attack-pattern--4fe72641-d0f7-46a2-9af7-1c79b7db8af1",
"modified": "2026-11-06T04:28:26Z",
"name": "Unauthenticated Web API Leaking AWS S3 Write Credentials",
"spec_version": "2.1",
"type": "attack-pattern",
"x_confidence": 0.9,
"x_evidence": "原文：An unauthenticated web API leaked AWS S3 credentials"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "在 Apple 证书盗窃活动中搜索证书库获取 .p12 文件和明文密码，运行验证管道筛选可用证书",
"id": "attack-pattern--72c57ba7-1a03-499f-b56a-d1db0df3431d",
"modified": "2026-11-06T04:28:26Z",
"name": "Apple Certificate Library Search and Validation",
"spec_version": "2.1",
"type": "attack-pattern",
"x_confidence": 0.9,
"x_evidence": "原文：agents searched for the 证书库 ... ran a validation pipeline ..."
},
{
"created": "2026-11-06T04:28:26Z",
"description": "针对 292 个加密货币支付基础设施域进行渗透，定位提现接口/USDT 钱包配置并转移 USDT",
"id": "attack-pattern--21c46033-5a31-46da-8ddf-636e45b75101",
"modified": "2026-11-06T04:28:26Z",
"name": "Cryptocurrency Payment Infrastructure Domain Infiltration",
"spec_version": "2.1",
"type": "attack-pattern",
"x_confidence": 0.9,
"x_evidence": "原文：actor set tasks for 292 different crypto payment infrastructure domains ... penetrate ... drain ... USDT"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "植入后门，修改充值/提现收款地址",
"id": "attack-pattern--b3586712-a592-40b9-b7dc-5e4b00119740",
"modified": "2026-11-06T04:28:26Z",
"name": "Backdoor via Payment Address Modification",
"spec_version": "2.1",
"type": "attack-pattern",
"x_confidence": 0.9,
"x_evidence": "原文：Plant a backdoor—locate ... deposit/withdrawal receiving address configuration and change it"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "通过重写 manifest.plist 的包下载 URL 或 index.html 的 meta-refresh 目标，替换 IPA 或植入钓鱼页面",
"id": "attack-pattern--0aeba288-ba11-412c-9972-f5e546a4cc58",
"modified": "2026-11-06T04:28:26Z",
"name": "Supply Chain Attack via Manifest or Index Modification",
"spec_version": "2.1",
"type": "attack-pattern",
"x_confidence": 0.9,
"x_evidence": "原文：Execute S3 storage poisoning ... rewrite manifest.plist ... or index.html"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "逆向工程相关 APK 后从灰色市场后端凭证服务器恢复王者荣耀凭证",
"id": "attack-pattern--2f0d4f7b-9f14-4b57-b8c2-709a600ccf08",
"modified": "2026-11-06T04:28:26Z",
"name": "APK Reverse Engineering for Credential Recovery",
"spec_version": "2.1",
"type": "attack-pattern",
"x_confidence": 0.9,
"x_evidence": "原文：After reverse engineering various related APKs ... recovered more than 190,000 sets of credentials"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "攻击者使用 ARTEX 平台实施攻击",
"id": "relationship--3e2ead18-bbcb-4c5b-8eaa-cd05839ac202",
"modified": "2026-11-06T04:28:26Z",
"relationship_type": "uses",
"source_ref": "intrusion-set--b4603a10-fc43-4fef-81e1-8d843add171b",
"spec_version": "2.1",
"target_ref": "tool--0d6d55ed-a03b-47e0-a7aa-287b41ea8945",
"type": "relationship",
"x_confidence": 0.95,
"x_evidence": "原文：threat actors can carry out attacks ... using agentic hacking frameworks like ARTEX"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "ARTEX C2 基础设施托管 ARTEX 面板/实例",
"id": "relationship--bdc20256-353b-4314-a8ee-02d7f4db728c",
"modified": "2026-11-06T04:28:26Z",
"relationship_type": "hosts",
"source_ref": "infrastructure--35185fba-a2d4-4263-842b-8ac82da6f685",
"spec_version": "2.1",
"target_ref": "tool--0d6d55ed-a03b-47e0-a7aa-287b41ea8945",
"type": "relationship",
"x_confidence": 0.85,
"x_evidence": "原文：2,557 systems hosting or having hosted ARTEX panels"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "该 IP 是 ARTEX C&C 基础设施的一部分",
"id": "relationship--c4d02110-54e6-49aa-bca2-56cf8bc7efcd",
"modified": "2026-11-06T04:28:26Z",
"relationship_type": "consists-of",
"source_ref": "infrastructure--35185fba-a2d4-4263-842b-8ac82da6f685",
"spec_version": "2.1",
"target_ref": "ipv4-addr--aae03d52-bd65-4cfa-9525-84d7cad0bc75",
"type": "relationship",
"x_confidence": 0.95,
"x_evidence": "原文 C&C 表列出该 IP 属于 ARTEX C&C 基础设施"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "该 IP 是 ARTEX C&C 基础设施的一部分",
"id": "relationship--6ca3a24b-5904-4a9a-8e78-c3debae10fd2",
"modified": "2026-11-06T04:28:26Z",
"relationship_type": "consists-of",
"source_ref": "infrastructure--35185fba-a2d4-4263-842b-8ac82da6f685",
"spec_version": "2.1",
"target_ref": "ipv4-addr--41f752f9-f6af-4fc0-aa66-cb956bde7fa1",
"type": "relationship",
"x_confidence": 0.95,
"x_evidence": "原文 C&C 表列出该 IP 属于 ARTEX C&C 基础设施"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "该 IP 是 ARTEX C&C 基础设施的一部分",
"id": "relationship--b3385c4b-bf97-481b-b1e8-0ec421c6e4ab",
"modified": "2026-11-06T04:28:26Z",
"relationship_type": "consists-of",
"source_ref": "infrastructure--35185fba-a2d4-4263-842b-8ac82da6f685",
"spec_version": "2.1",
"target_ref": "ipv4-addr--2481a55c-7d31-42b2-a78d-743a0b9eda09",
"type": "relationship",
"x_confidence": 0.95,
"x_evidence": "原文 C&C 表列出该 IP 属于 ARTEX C&C 基础设施"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "该 IP 是 ARTEX C&C 基础设施的一部分",
"id": "relationship--20258103-995e-44fc-b234-a585732faf4a",
"modified": "2026-11-06T04:28:26Z",
"relationship_type": "consists-of",
"source_ref": "infrastructure--35185fba-a2d4-4263-842b-8ac82da6f685",
"spec_version": "2.1",
"target_ref": "ipv4-addr--fdf6c8dd-602a-46ad-ad65-0c44f29fa040",
"type": "relationship",
"x_confidence": 0.95,
"x_evidence": "原文 C&C 表列出该 IP 属于 ARTEX C&C 基础设施"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "该 IP 是 ARTEX C&C 基础设施的一部分",
"id": "relationship--896daf55-d782-4d32-b964-61bc254f9f9e",
"modified": "2026-11-06T04:28:26Z",
"relationship_type": "consists-of",
"source_ref": "infrastructure--35185fba-a2d4-4263-842b-8ac82da6f685",
"spec_version": "2.1",
"target_ref": "ipv4-addr--d9c4f4d9-f859-489a-a56a-f0fbebdeb3a6",
"type": "relationship",
"x_confidence": 0.95,
"x_evidence": "原文 C&C 表列出该 IP 范围属于 ARTEX C&C 基础设施"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "该 IP 是 ARTEX C&C 基础设施的一部分",
"id": "relationship--aad4fd0b-2014-4d3c-b3df-a5737721ecf4",
"modified": "2026-11-06T04:28:26Z",
"relationship_type": "consists-of",
"source_ref": "infrastructure--35185fba-a2d4-4263-842b-8ac82da6f685",
"spec_version": "2.1",
"target_ref": "ipv4-addr--efc5324a-4147-4ec8-89b2-c8b94d5b6a5a",
"type": "relationship",
"x_confidence": 0.95,
"x_evidence": "原文 C&C 表列出该 IP 属于 ARTEX C&C 基础设施"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "该 IP 是 ARTEX C&C 基础设施的一部分",
"id": "relationship--6e5aeabf-dd70-4e86-aaa8-b17778ed0227",
"modified": "2026-11-06T04:28:26Z",
"relationship_type": "consists-of",
"source_ref": "infrastructure--35185fba-a2d4-4263-842b-8ac82da6f685",
"spec_version": "2.1",
"target_ref": "ipv4-addr--9934906b-8c15-43a3-9811-ff4726c4d58c",
"type": "relationship",
"x_confidence": 0.95,
"x_evidence": "原文 C&C 表列出该 IP 范围属于 ARTEX C&C 基础设施"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "该 IP 是 ARTEX C&C 基础设施的一部分",
"id": "relationship--7afc2475-ef4b-4dd4-940c-3a5dff4429e4",
"modified": "2026-11-06T04:28:26Z",
"relationship_type": "consists-of",
"source_ref": "infrastructure--35185fba-a2d4-4263-842b-8ac82da6f685",
"spec_version": "2.1",
"target_ref": "ipv4-addr--cc3ff752-001a-45ae-a506-96e98a4e670a",
"type": "relationship",
"x_confidence": 0.95,
"x_evidence": "原文 C&C 表列出该 IP 范围属于 ARTEX C&C 基础设施"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "Apple 证书盗窃活动使用 ARTEX 平台",
"id": "relationship--0b4a6047-f59b-46f1-8e7e-1b705914fc0d",
"modified": "2026-11-06T04:28:26Z",
"relationship_type": "uses",
"source_ref": "campaign--4989a5ad-f381-4a20-bf54-396593f5dce3",
"spec_version": "2.1",
"target_ref": "tool--0d6d55ed-a03b-47e0-a7aa-287b41ea8945",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文：One ARTEX operator was observed tasking their agent fleet with compromising those gray-market signing shops"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "加密货币窃取活动使用 ARTEX 平台",
"id": "relationship--e8c6632d-9611-4aa3-bdef-8bd55de93e4b",
"modified": "2026-11-06T04:28:26Z",
"relationship_type": "uses",
"source_ref": "campaign--1673bfd9-f781-4025-9e36-c352bdaa07c8",
"spec_version": "2.1",
"target_ref": "tool--0d6d55ed-a03b-47e0-a7aa-287b41ea8945",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文：Another observed ARTEX operator tasked their agents with acquiring cryptocurrency"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "游戏账号盗窃活动使用 ARTEX 平台",
"id": "relationship--81fd6197-fe7e-4b4a-933b-836b63b93cfd",
"modified": "2026-11-06T04:28:26Z",
"relationship_type": "uses",
"source_ref": "campaign--467101f0-e7ff-4f37-a11a-76ed4f6d627c",
"spec_version": "2.1",
"target_ref": "tool--0d6d55ed-a03b-47e0-a7aa-287b41ea8945",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文：The ARTEX operator's target was the backend ..."
},
{
"created": "2026-11-06T04:28:26Z",
"description": "ARTEX 代理自主执行该漏洞发现与利用行为",
"id": "relationship--c6c4af2f-cba8-480a-a4a6-e9d0d48e410c",
"modified": "2026-11-06T04:28:26Z",
"relationship_type": "uses",
"source_ref": "tool--0d6d55ed-a03b-47e0-a7aa-287b41ea8945",
"spec_version": "2.1",
"target_ref": "attack-pattern--b6d74d92-0287-4c59-91c6-90013f21e299",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文：Hardcoded administrator passwords in SPA JavaScript bundles"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "ARTEX 代理自主执行该漏洞发现与利用行为",
"id": "relationship--60612295-f4cf-40ac-94fb-8242e5521c6f",
"modified": "2026-11-06T04:28:26Z",
"relationship_type": "uses",
"source_ref": "tool--0d6d55ed-a03b-47e0-a7aa-287b41ea8945",
"spec_version": "2.1",
"target_ref": "attack-pattern--f8256147-db21-4aa1-ba71-35d44dbbef76",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文：Missing authentication on Web APIs"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "ARTEX 代理自主执行该漏洞发现与利用行为",
"id": "relationship--7e5d8ca3-781b-458d-97d0-b4b8c5d0a257",
"modified": "2026-11-06T04:28:26Z",
"relationship_type": "uses",
"source_ref": "tool--0d6d55ed-a03b-47e0-a7aa-287b41ea8945",
"spec_version": "2.1",
"target_ref": "attack-pattern--1236d6cd-3d6d-4de5-882f-4213a790b97c",
"type": "relationship",
"x_confidence": 0.95,
"x_evidence": "原文：Remote Code Execution (RCE) through command injection"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "ARTEX 代理自主执行该漏洞发现与利用行为",
"id": "relationship--6f24601e-5e37-4d3b-9c27-f950bc40e03b",
"modified": "2026-11-06T04:28:26Z",
"relationship_type": "uses",
"source_ref": "tool--0d6d55ed-a03b-47e0-a7aa-287b41ea8945",
"spec_version": "2.1",
"target_ref": "attack-pattern--df0724af-d208-4a69-a541-68a4a0bddb1e",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文：Insecure Direct Object References (IDOR)"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "ARTEX 代理自主执行该漏洞发现与利用行为",
"id": "relationship--b2842569-7eb9-48b7-8a97-78a2d252b05c",
"modified": "2026-11-06T04:28:26Z",
"relationship_type": "uses",
"source_ref": "tool--0d6d55ed-a03b-47e0-a7aa-287b41ea8945",
"spec_version": "2.1",
"target_ref": "attack-pattern--ac25f597-7c3e-4cc0-bddd-193595cca4e4",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文：Weak administrative credentials"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "ARTEX 代理自主执行该漏洞发现与利用行为",
"id": "relationship--113c79d4-6d4c-4a72-b278-6b9b6cb59da5",
"modified": "2026-11-06T04:28:26Z",
"relationship_type": "uses",
"source_ref": "tool--0d6d55ed-a03b-47e0-a7aa-287b41ea8945",
"spec_version": "2.1",
"target_ref": "attack-pattern--e4027cd1-27bf-4437-bb54-414f97c56c38",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文：RCE through Server Side Template Injection (SSTI)"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "ARTEX 代理自主执行该漏洞发现与利用行为",
"id": "relationship--5eed5d35-8028-40a5-b093-6328152f81e7",
"modified": "2026-11-06T04:28:26Z",
"relationship_type": "uses",
"source_ref": "tool--0d6d55ed-a03b-47e0-a7aa-287b41ea8945",
"spec_version": "2.1",
"target_ref": "attack-pattern--b60b3267-2262-4e13-a1c9-6df96f46b5e5",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文：privilege escalation on a Linux host from a low privileged user to root through overly permissive folder access"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "ARTEX 代理自主执行该漏洞发现与利用行为",
"id": "relationship--09bd8b25-df9c-42af-96d7-85efc105f24d",
"modified": "2026-11-06T04:28:26Z",
"relationship_type": "uses",
"source_ref": "tool--0d6d55ed-a03b-47e0-a7aa-287b41ea8945",
"spec_version": "2.1",
"target_ref": "attack-pattern--7e398ccc-e195-4c06-a756-496060d59921",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文：hardcoded administrative credentials in frontend JavaScript bundles and HTML source code"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "ARTEX 代理自主执行该漏洞发现与利用行为",
"id": "relationship--af719c94-92e3-4d5f-8659-cf0426285ef4",
"modified": "2026-11-06T04:28:26Z",
"relationship_type": "uses",
"source_ref": "tool--0d6d55ed-a03b-47e0-a7aa-287b41ea8945",
"spec_version": "2.1",
"target_ref": "attack-pattern--e3c018bb-6fe9-4288-b67e-cfb6a20c5a9e",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文：store all their credentials a static file in the web root, unprotected"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "ARTEX 代理自主执行该漏洞发现与利用行为",
"id": "relationship--47f7988a-0cab-48c4-95dd-87c99e8ef88e",
"modified": "2026-11-06T04:28:26Z",
"relationship_type": "uses",
"source_ref": "tool--0d6d55ed-a03b-47e0-a7aa-287b41ea8945",
"spec_version": "2.1",
"target_ref": "attack-pattern--4fe72641-d0f7-46a2-9af7-1c79b7db8af1",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文：An unauthenticated web API leaked AWS S3 credentials"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "Apple 证书盗窃活动使用证书库搜索与验证手段",
"id": "relationship--98242b07-2303-43dc-af8a-71f33b078d31",
"modified": "2026-11-06T04:28:26Z",
"relationship_type": "uses",
"source_ref": "campaign--4989a5ad-f381-4a20-bf54-396593f5dce3",
"spec_version": "2.1",
"target_ref": "attack-pattern--72c57ba7-1a03-499f-b56a-d1db0df3431d",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文：agents searched for the 证书库 ... ran a validation pipeline"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "加密货币窃取活动使用加密货币支付基础设施域渗透手段",
"id": "relationship--392da8ba-fe48-4fd9-8c37-8d0269c47981",
"modified": "2026-11-06T04:28:26Z",
"relationship_type": "uses",
"source_ref": "campaign--1673bfd9-f781-4025-9e36-c352bdaa07c8",
"spec_version": "2.1",
"target_ref": "attack-pattern--21c46033-5a31-46da-8ddf-636e45b75101",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文：actor set tasks for 292 different crypto payment infrastructure domains"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "加密货币窃取活动植入后门修改收款地址",
"id": "relationship--8c4bf65b-f2bf-4409-aec8-0bef3192c146",
"modified": "2026-11-06T04:28:26Z",
"relationship_type": "uses",
"source_ref": "campaign--1673bfd9-f781-4025-9e36-c352bdaa07c8",
"spec_version": "2.1",
"target_ref": "attack-pattern--b3586712-a592-40b9-b7dc-5e4b00119740",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文：Plant a backdoor—locate ... deposit/withdrawal receiving address configuration and change it"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "加密货币窃取活动利用供应链攻击修改 manifest.plist 或 index.html",
"id": "relationship--7f3ccc5c-f119-4a8f-8b4e-353a57945b4f",
"modified": "2026-11-06T04:28:26Z",
"relationship_type": "uses",
"source_ref": "campaign--1673bfd9-f781-4025-9e36-c352bdaa07c8",
"spec_version": "2.1",
"target_ref": "attack-pattern--0aeba288-ba11-412c-9972-f5e546a4cc58",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文：Execute S3 storage poisoning ... rewrite manifest.plist ... or index.html"
},
{
"created": "2026-11-06T04:28:26Z",
"description": "游戏账号盗窃活动使用 APK 逆向工程恢复凭证",
"id": "relationship--b8624f9f-6a86-4bde-8b52-40ce2aa5c4ee",
"modified": "2026-11-06T04:28:26Z",
"relationship_type": "uses",
"source_ref": "campaign--467101f0-e7ff-4f37-a11a-76ed4f6d627c",
"spec_version": "2.1",
"target_ref": "attack-pattern--2f0d4f7b-9f14-4b57-b8c2-709a600ccf08",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文：After reverse engineering various related APKs ... recovered credentials"
}
],
"spec_version": "2.1",
"type": "bundle"
}报告链接：
https://research.checkpoint.com/2026/hacking-on-autopilot-inside-artex-cybercrime-campaigns/
───────────────────────────────────
（四）AgentScope认证、授权与命令执行缺陷
事件名称：AgentScope三项漏洞涉及身份验证、MCP执行与Bash授权
发布日期：2026-11-05
发布机构：VulDB
威胁概述：
11月5日披露的三项漏洞涉及AgentScope的不同执行入口。CVE-2026-123024涉及Agent Service直接信任请求头中的用户标识，调用者可冒用其他用户身份。CVE-2026-123022涉及MCP Workspace API将可控命令传给子进程，可能导致远程系统命令执行。这两项通告覆盖至2.0.11。
CVE-2026-123023影响至2.0.8，Bash工具把具备写入能力的tee归为只读命令，使文件写入可能绕过预期的用户确认。部署方应按组件核对版本与接口暴露情况，在服务端验证身份与工作区权限，并限制调用者提交任意MCP启动命令。对已暴露的实例，检查进程启动记录、工作区配置变更及异常文件写入。
IOC指标：
· CVE：CVE-2026-123022, CVE-2026-123023, CVE-2026-123024
报告链接：
https://vuldb.com/cve/CVE-2026-123024
https://vuldb.com/es/cve/CVE-2026-123022
https://nvd.nist.gov/vuln/detail/CVE-2026-123023
───────────────────────────────────
（五）Dify自托管沙箱使用硬编码默认密钥
事件名称：Dify代码执行沙箱使用随部署分发的默认API密钥
发布日期：2026-11-05
发布机构：VulDB
威胁概述：
CVE-2026-123135涉及Dify自托管部署的代码执行沙箱。研究者在Dify 1.15.0的Docker部署中复现，示例环境文件包含公开的默认API密钥，按快速部署步骤直接复制该文件可保留默认值。若调用方还能通过代理或其他网络路径访问沙箱接口，就可能使用该密钥在沙箱内执行代码。
影响取决于运行中的密钥配置和网络可达性。企业应核查实际生效的沙箱密钥，确认应用与沙箱两端已同步轮换，限制沙箱及中间代理的访问来源，并检查异常执行请求。原始项目问题于10月公开，本期按11月5日的CVE通告纳入。
IOC指标：
· CVE：CVE-2026-123135
报告链接：
https://github.com/langgenius/dify/issues/44054
───────────────────────────────────
（六）LLMJacking盗用企业推理额度
事件名称：LLMJacking的兴起：攻击者如何从被盗的云和模型资源中获利
发布日期：2026-11-03
发布机构：Google Threat Intelligence Group
威胁概述：
Mandiant在2026年调查多起企业模型访问权限遭盗用的事件，涉及金融、零售、科技及运输行业。攻击者取得云或模型访问凭据后，通过API网关和自建中转服务汇聚多个账号的推理额度，按调用量分发或出售访问权限。网关使买方无需直接接触受害账号，也增加了凭调用来源反查被盗密钥的难度。
部分事件单日异常支出超过10万美元，个别组织在撤销访问前累计支出达到100万美元。检测应同时关联模型调用量、密钥使用来源和账单变化，尤其关注突增的并发、首次使用的模型及此前从未出现的调用方。处置应先撤销受影响的访问凭据和会话，再核查该身份可管理的网关、代理密钥和其他模型资源。
IOC指标：
· Domain：jet-night.com
STIX详情：
{
"id": "bundle--efc4fbe0-119e-4339-a22f-7ebf7da7cf16",
"objects": [
{
"created": "2026-11-02T16:31:18Z",
"description": "窃取云凭证以攻击并滥用LLM服务的威胁组织",
"id": "intrusion-set--de744608-0016-47d7-bc2e-97fe7fc89c39",
"modified": "2026-11-02T16:31:18Z",
"name": "UNC6993",
"spec_version": "2.1",
"type": "intrusion-set",
"x_confidence": 0.95,
"x_evidence": "原文称UNC6993通过错误配置的Service Account key入侵云实例，并借此获取LLM API访问权限。"
},
{
"created": "2026-11-02T16:31:18Z",
"description": "作为非法路由网关，代理、聚合和转售未授权LLM访问权限的下游基础设施/生态系统",
"id": "infrastructure--76432c73-e7e0-4b43-83c8-d796cea9360c",
"modified": "2026-11-02T16:31:18Z",
"name": "LLM Mixers",
"spec_version": "2.1",
"type": "infrastructure",
"x_confidence": 0.9,
"x_evidence": "原文将LLM Mixers定义为代理、聚合和转售未授权LLM访问的非法路由网关。"
},
{
"created": "2026-11-02T16:31:18Z",
"description": "被攻击者测试是否公开暴露并尝试注册自身模型的LLM服务端点",
"id": "infrastructure--a102be2d-93d2-4714-955b-ac8378d7b129",
"modified": "2026-11-02T16:31:18Z",
"name": "Ollama",
"spec_version": "2.1",
"type": "infrastructure",
"x_confidence": 0.85,
"x_evidence": "原文图注称攻击者测试公开暴露的Ollama端点，并尝试注册自己的模型。"
},
{
"created": "2026-11-02T16:31:18Z",
"description": "被攻击者利用漏洞提权并作为网关管理的LLM路由软件",
"id": "tool--af914fdc-e4b2-43d7-a0c2-044641e7ebeb",
"modified": "2026-11-02T16:31:18Z",
"name": "LiteLLM",
"spec_version": "2.1",
"type": "tool",
"x_confidence": 0.9,
"x_evidence": "原文称后续集群针对受害者的LiteLLM网关实施漏洞利用，并在外部服务器托管LiteLLM网关管理API流量。"
},
{
"created": "2026-11-02T16:31:18Z",
"description": "LiteLLM网关/key/regenerate端点中的用户ID重新绑定漏洞，用于提升权限",
"id": "vulnerability--5a540475-0030-4ab1-b3ea-d0581ca84349",
"modified": "2026-11-02T16:31:18Z",
"name": "CVE-2026-40217",
"spec_version": "2.1",
"type": "vulnerability",
"x_confidence": 1,
"x_evidence": "原文称攻击者利用/key/regenerate端点中的用户ID重绑定漏洞CVE-2026-40217将Virtual Keys提升为PROXY_ADMIN。"
},
{
"created": "2026-11-02T16:31:18Z",
"description": "攻击者重新包装和重命名公开的前沿LLM端点时使用的假名角色",
"id": "identity--dd68d511-d797-42e7-868b-ac6ca362ad4e",
"modified": "2026-11-02T16:31:18Z",
"name": "D1337-KAIROS",
"spec_version": "2.1",
"type": "identity",
"x_confidence": 0.85,
"x_evidence": "原文称攻击者将多个前沿LLM端点以D1337-KAIROS假名重新包装并公开。"
},
{
"created": "2026-11-02T16:31:18Z",
"description": "攻击者用来部署容器化后门的代理框架",
"id": "tool--132e378e-0a8b-43f6-bebb-c59ea4c81f04",
"modified": "2026-11-02T16:31:18Z",
"name": "Manus",
"spec_version": "2.1",
"type": "tool",
"x_confidence": 0.9,
"x_evidence": "原文称攻击者使用Manus代理框架部署容器化后门。"
},
{
"created": "2026-11-02T16:31:18Z",
"description": "辅助攻击者在云环境执行命令和推理的元搜索工具",
"id": "tool--6178c874-e716-42f0-9cb0-4e3e9614b77f",
"modified": "2026-11-02T16:31:18Z",
"name": "SearXNG",
"spec_version": "2.1",
"type": "tool",
"x_confidence": 0.85,
"x_evidence": "原文称该后门由SearXNG元搜索和沙箱执行环境辅助。"
},
{
"created": "2026-11-02T16:31:18Z",
"description": "UNC6993使用的集中式模型中心和网关开源工具",
"id": "tool--81432455-405b-476c-b1a8-594ab6cd55b7",
"modified": "2026-11-02T16:31:18Z",
"name": "new-api",
"spec_version": "2.1",
"type": "tool",
"x_confidence": 0.95,
"x_evidence": "原文称UNC6993使用new-api这一集中式模型中心/网关聚合被盗密钥。"
},
{
"created": "2026-11-02T16:31:18Z",
"description": "将CLI工具转换为标准前沿模型端点的API代理工具",
"id": "tool--ff6bcee4-5aa3-4254-a1bf-a0176fc6a474",
"modified": "2026-11-02T16:31:18Z",
"name": "gcli2api",
"spec_version": "2.1",
"type": "tool",
"x_confidence": 0.9,
"x_evidence": "原文称UNC6993使用gcli2api将CLI工具转换为标准前沿模型端点。"
},
{
"created": "2026-11-02T16:31:18Z",
"description": "攻击者部署的自定义代理中继基础设施，用于接入非法转售生态",
"id": "infrastructure--ffe48321-ec2b-4370-af7e-2fa8bc47a849",
"modified": "2026-11-02T16:31:18Z",
"name": "ai-relay",
"spec_version": "2.1",
"type": "infrastructure",
"x_confidence": 0.85,
"x_evidence": "原文称攻击者部署了名为ai-relay的自定义代理中继基础设施。"
},
{
"aliases": [
"newapi[.]pro"
],
"created": "2026-11-02T16:31:18Z",
"description": "非法的新API转售生态系统基础设施/域名",
"id": "domain-name--5afce4c4-a32f-4206-8aee-281e18fa90b8",
"modified": "2026-11-02T16:31:18Z",
"name": "newapi.pro",
"spec_version": "2.1",
"type": "domain-name",
"x_confidence": 0.95,
"x_evidence": "原文IOC表将newapi.pro标注为LLM Mixer，并提及newapi[.]pro转售生态。"
},
{
"created": "2026-11-02T16:31:18Z",
"description": "利用被盗API密钥提供服务的代币路由服务/LLM Mixer域名",
"id": "domain-name--947cd41e-be19-4d79-a1f4-79016d81d973",
"modified": "2026-11-02T16:31:18Z",
"name": "jet-night.com",
"spec_version": "2.1",
"type": "domain-name",
"x_confidence": 0.95,
"x_evidence": "原文IOC表将jet-night.com标注为LLM Mixer，并称其利用被盗第三方API密钥提供token路由服务。"
},
{
"aliases": [
"Financially Motivated Threat Clusters"
],
"created": "2026-11-02T16:31:18Z",
"description": "多个未命名的财务动机威胁集群和后续运营集群，实施初始访问、提权、LLM滥用与转售",
"id": "intrusion-set--6242c5b1-f955-4faf-a0b1-6c36695226cb",
"modified": "2026-11-02T16:31:18Z",
"name": "LLMJacking Threat Clusters",
"spec_version": "2.1",
"type": "intrusion-set",
"x_confidence": 0.75,
"x_evidence": "原文称GTIG识别出多个财务动机威胁集群，并观察到多个未命名威胁行为者实施初始访问、提权与LLM滥用。"
},
{
"created": "2026-11-02T16:31:18Z",
"description": "UNC6993使用new-api集中式模型中心聚合被盗密钥并出售访问",
"id": "relationship--870b289a-09c6-4bad-8f90-4e70fcad8b40",
"modified": "2026-11-02T16:31:18Z",
"relationship_type": "uses",
"source_ref": "intrusion-set--de744608-0016-47d7-bc2e-97fe7fc89c39",
"spec_version": "2.1",
"target_ref": "tool--81432455-405b-476c-b1a8-594ab6cd55b7",
"type": "relationship",
"x_confidence": 0.95,
"x_evidence": "原文称UNC6993使用new-api等开源工具聚合被盗密钥并平衡请求负载。"
},
{
"created": "2026-11-02T16:31:18Z",
"description": "UNC6993使用gcli2api将CLI工具转换为标准前沿模型端点以进行访问转售",
"id": "relationship--1460d622-7fb9-4d1a-a868-cc37605c8c5b",
"modified": "2026-11-02T16:31:18Z",
"relationship_type": "uses",
"source_ref": "intrusion-set--de744608-0016-47d7-bc2e-97fe7fc89c39",
"spec_version": "2.1",
"target_ref": "tool--ff6bcee4-5aa3-4254-a1bf-a0176fc6a474",
"type": "relationship",
"x_confidence": 0.95,
"x_evidence": "原文称UNC6993使用gcli2api将CLI工具转换为标准前沿模型端点。"
},
{
"created": "2026-11-02T16:31:18Z",
"description": "LLM Mixer类别包含域名jet-night.com，该域名提供代币路由服务",
"id": "relationship--d163c813-9413-460a-a9d7-e29ce4e8a515",
"modified": "2026-11-02T16:31:18Z",
"relationship_type": "consists-of",
"source_ref": "infrastructure--76432c73-e7e0-4b43-83c8-d796cea9360c",
"spec_version": "2.1",
"target_ref": "domain-name--947cd41e-be19-4d79-a1f4-79016d81d973",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文IOC表将jet-night.com标注为LLM Mixer。"
},
{
"created": "2026-11-02T16:31:18Z",
"description": "LLM Mixer类别包含域名newapi.pro，该域名属于非法新API转售生态",
"id": "relationship--2e8d3ceb-f161-4b38-8e11-39d8159e4e58",
"modified": "2026-11-02T16:31:18Z",
"relationship_type": "consists-of",
"source_ref": "infrastructure--76432c73-e7e0-4b43-83c8-d796cea9360c",
"spec_version": "2.1",
"target_ref": "domain-name--5afce4c4-a32f-4206-8aee-281e18fa90b8",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文IOC表将newapi.pro标注为LLM Mixer，并提及newapi[.]pro转售生态。"
},
{
"created": "2026-11-02T16:31:18Z",
"description": "ai-relay自定义代理中继基础设施接入newapi.pro转售生态",
"id": "relationship--52b98a51-aa63-4059-8569-588d07bad54a",
"modified": "2026-11-02T16:31:18Z",
"relationship_type": "connects-to",
"source_ref": "infrastructure--ffe48321-ec2b-4370-af7e-2fa8bc47a849",
"spec_version": "2.1",
"target_ref": "domain-name--5afce4c4-a32f-4206-8aee-281e18fa90b8",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文称该自定义中继基础设施被用于将商业LLM访问接入newapi[.]pro转售生态。"
},
{
"created": "2026-11-02T16:31:18Z",
"description": "LLMJacking威胁集群针对公开暴露的Ollama端点进行测试与模型注册",
"id": "relationship--485a2b2a-23d4-4c68-b657-76fb10efe5c6",
"modified": "2026-11-02T16:31:18Z",
"relationship_type": "targets",
"source_ref": "intrusion-set--6242c5b1-f955-4faf-a0b1-6c36695226cb",
"spec_version": "2.1",
"target_ref": "infrastructure--a102be2d-93d2-4714-955b-ac8378d7b129",
"type": "relationship",
"x_confidence": 0.85,
"x_evidence": "原文称威胁行为者测试公开暴露的Ollama端点并尝试注册自己的模型。"
},
{
"created": "2026-11-02T16:31:18Z",
"description": "LLMJacking威胁集群针对LiteLLM网关实施漏洞利用和流量管理",
"id": "relationship--0a10f31f-ce5a-4b40-8c60-2553c91d1339",
"modified": "2026-11-02T16:31:18Z",
"relationship_type": "targets",
"source_ref": "intrusion-set--6242c5b1-f955-4faf-a0b1-6c36695226cb",
"spec_version": "2.1",
"target_ref": "tool--af914fdc-e4b2-43d7-a0c2-044641e7ebeb",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文称后续集群对受害者的LiteLLM网关实施针对性应用逻辑漏洞利用。"
},
{
"created": "2026-11-02T16:31:18Z",
"description": "LLMJacking威胁集群利用CVE-2026-40217提升LiteLLM权限",
"id": "relationship--edbb8ee4-adca-46e2-8818-e4cdb36208f9",
"modified": "2026-11-02T16:31:18Z",
"relationship_type": "exploits",
"source_ref": "intrusion-set--6242c5b1-f955-4faf-a0b1-6c36695226cb",
"spec_version": "2.1",
"target_ref": "vulnerability--5a540475-0030-4ab1-b3ea-d0581ca84349",
"type": "relationship",
"x_confidence": 0.95,
"x_evidence": "原文称攻击者利用CVE-2026-40217在LiteLLM的/key/regenerate端点提权。"
},
{
"created": "2026-11-02T16:31:18Z",
"description": "LLMJacking威胁集群以D1337-KAIROS假名运营",
"id": "relationship--dc12f8ec-ce56-4d54-bf00-0adf74f0c656",
"modified": "2026-11-02T16:31:18Z",
"relationship_type": "attributed-to",
"source_ref": "intrusion-set--6242c5b1-f955-4faf-a0b1-6c36695226cb",
"spec_version": "2.1",
"target_ref": "identity--dd68d511-d797-42e7-868b-ac6ca362ad4e",
"type": "relationship",
"x_confidence": 0.75,
"x_evidence": "原文称攻击者以D1337-KAIROS假名重新包装多个前沿LLM端点。"
},
{
"created": "2026-11-02T16:31:18Z",
"description": "LLMJacking威胁集群使用Manus部署后门",
"id": "relationship--6bb05d25-5ace-4586-9fd7-f57dc95fc28c",
"modified": "2026-11-02T16:31:18Z",
"relationship_type": "uses",
"source_ref": "intrusion-set--6242c5b1-f955-4faf-a0b1-6c36695226cb",
"spec_version": "2.1",
"target_ref": "tool--132e378e-0a8b-43f6-bebb-c59ea4c81f04",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文称攻击者使用Manus代理框架部署容器化后门。"
},
{
"created": "2026-11-02T16:31:18Z",
"description": "LLMJacking威胁集群使用SearXNG辅助推理与命令执行",
"id": "relationship--fa5c69b7-27be-4886-9a3f-84b1597f3fca",
"modified": "2026-11-02T16:31:18Z",
"relationship_type": "uses",
"source_ref": "intrusion-set--6242c5b1-f955-4faf-a0b1-6c36695226cb",
"spec_version": "2.1",
"target_ref": "tool--6178c874-e716-42f0-9cb0-4e3e9614b77f",
"type": "relationship",
"x_confidence": 0.85,
"x_evidence": "原文称SearXNG元搜索辅助后门在云环境中执行命令与推理。"
},
{
"created": "2026-11-02T16:31:18Z",
"description": "LLMJacking威胁集群使用ai-relay中继基础设施",
"id": "relationship--799597e3-ddb2-400b-82ed-1d352800584a",
"modified": "2026-11-02T16:31:18Z",
"relationship_type": "uses",
"source_ref": "intrusion-set--6242c5b1-f955-4faf-a0b1-6c36695226cb",
"spec_version": "2.1",
"target_ref": "infrastructure--ffe48321-ec2b-4370-af7e-2fa8bc47a849",
"type": "relationship",
"x_confidence": 0.85,
"x_evidence": "原文称攻击者部署自定义代理中继基础设施ai-relay。"
},
{
"created": "2026-11-02T16:31:18Z",
"description": "LLMJacking威胁集群使用jet-night.com token路由服务进行变现",
"id": "relationship--d07e876b-ca18-4afa-9c7a-df4740d2e0fd",
"modified": "2026-11-02T16:31:18Z",
"relationship_type": "uses",
"source_ref": "intrusion-set--6242c5b1-f955-4faf-a0b1-6c36695226cb",
"spec_version": "2.1",
"target_ref": "domain-name--947cd41e-be19-4d79-a1f4-79016d81d973",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文称攻击者利用被盗第三方API密钥驱动token路由服务jet-night.com。"
}
],
"spec_version": "2.1",
"type": "bundle"
}报告链接：
───────────────────────────────────
（七）CyberStrikeAI攻击教育机构
事件名称：CyberStrikeAI在野活动：智能体参与针对教育机构的入侵
发布日期：2026-11-03
发布机构：Kaspersky Securelist
威胁概述：
卡巴斯基在非洲及拉美教育机构调查中发现，攻击者在入侵后部署CyberStrikeAI。其控制端的大模型负责拆解任务、挑选工具并生成命令，Windows或Linux植入程序在失陷主机执行并回传结果。研究记录了主机和域侦察、提权、凭据获取以及横向移动，攻击最终发展到域级失陷。
在Windows环境中，报告记录了计划任务持久化、利用MiniDump读取LSASS内存、借助改名的Mimikatz执行DCSync，以及通过WMIExec横向移动。排查应串联进程启动、计划任务和注册表变更、异常目录复制请求及对C2的出站连接。对确认失陷的域，应按域级事件处置，核查受影响账户和主机，保全控制端及终端时间线。
IOC指标：
· IP：185.186.245.144, 104.234.26.163
· Domain：fastcdn.bar, media.fastcdn.bar
· MD5（节选）：d726a8b4886c636f76ca6d30ef6a6ff4, 2770562d104391b92b42671c270079bb, 09e1da2afa1216ecc55648ec8e122d2a, 805b9e4ae74c903787416800999b8418, 29efd64dd3c7fe1e2b022b7ad73a1ba5
STIX详情：
{
"id": "bundle--f026648e-be28-45bd-9d22-09dc1643ce37",
"objects": [
{
"created": "2026-11-03T04:47:16Z",
"description": "未归因的人类操作员，可能为中文使用者，负责手动准备和任务定义",
"id": "intrusion-set--cf2743cf-76df-4fc5-a748-8cfe0d574da3",
"modified": "2026-11-03T04:47:16Z",
"name": "Unattributed Operator",
"spec_version": "2.1",
"type": "intrusion-set",
"x_confidence": 0.75,
"x_evidence": "原文称活动无法归因到已知组织，但脚本中出现中文字符注释、使用 dnslog.cn、C2服务器重启时间多为UTC+8时段提示中文使用者"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "用于渗透测试和攻击后利用阶段自动化的开源框架，含LLM编排器和内置C2服务器",
"id": "tool--bcab53b8-c090-4f51-bfde-bd0098275bea",
"modified": "2026-11-03T04:47:16Z",
"name": "CyberStrikeAI",
"spec_version": "2.1",
"type": "tool",
"x_confidence": 0.95,
"x_evidence": "原文称 CyberStrikeAI is an open-source framework ... combining LLM-based attack orchestration and a built-in C2 server"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "用于执行恶意载荷、进行侦察和发现网络中的主机",
"id": "tool--d262d9e2-0c45-4dc9-85cf-68bd4d756b2f",
"modified": "2026-11-03T04:47:16Z",
"name": "PowerShell",
"spec_version": "2.1",
"type": "tool",
"x_confidence": 0.93,
"x_evidence": "原文多处称 agent uses PowerShell to execute payload and built-in PowerShell functionality for discovery"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "用于创建计划任务以便用 SYSTEM 权限运行载荷的实用程序",
"id": "tool--189c9825-049c-44c6-a9be-a2331361ff85",
"modified": "2026-11-03T04:47:16Z",
"name": "schtasks",
"spec_version": "2.1",
"type": "tool",
"x_confidence": 0.9,
"x_evidence": "原文称 agent on remote hosts often created scheduled tasks so that malicious payload would run with SYSTEM privileges"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "用于创建任务的 COM 对象，作为 schtasks 的替代方法",
"id": "tool--c26533c7-22da-474d-ad69-e3440a9ee090",
"modified": "2026-11-03T04:47:16Z",
"name": "Schedule.Service",
"spec_version": "2.1",
"type": "tool",
"x_confidence": 0.88,
"x_evidence": "原文称 An alternative method that does not use schtasks utility is to create a task via the Schedule.Service COM object"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "用于解码 Base64 文件的实用程序",
"id": "tool--237eccc7-0bb0-420d-b0ef-251418ad77de",
"modified": "2026-11-03T04:47:16Z",
"name": "certutil",
"spec_version": "2.1",
"type": "tool",
"x_confidence": 0.9,
"x_evidence": "原文称 attackers used the certutil utility to decode the resulting file"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "用于建立持久化的计划任务名称及注册表键值名称",
"id": "tool--cc03eb17-b501-4ab0-8c83-76983e1bf52c",
"modified": "2026-11-03T04:47:16Z",
"name": "SystemUpdate",
"spec_version": "2.1",
"type": "tool",
"x_confidence": 0.7,
"x_evidence": "原文称 agent created a scheduled task named SystemUpdate ... and alternative persistence by adding a value to registry key ... name matches task name (SystemUpdate)"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "用于持久化的注册表键",
"id": "tool--1714c10c-b76e-4bcb-b7c8-c4081a64ec0c",
"modified": "2026-11-03T04:47:16Z",
"name": "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run",
"spec_version": "2.1",
"type": "tool",
"x_confidence": 0.7,
"x_evidence": "原文称 adding a value to the registry key HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "被评估用于权限提升的实用程序，涉及 AlwaysInstallElevated 键",
"id": "tool--e5c50180-410a-49bc-a6b8-e1732b4e736b",
"modified": "2026-11-03T04:47:16Z",
"name": "msiexec",
"spec_version": "2.1",
"type": "tool",
"x_confidence": 0.82,
"x_evidence": "原文称 agent generates a script designed to ... exploiting msiexec (the AlwaysInstallElevated key)"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "用于收集远程主机额外信息的标准操作系统实用程序",
"id": "tool--436c0efd-e502-4b67-982d-db3124dcb956",
"modified": "2026-11-03T04:47:16Z",
"name": "net.exe",
"spec_version": "2.1",
"type": "tool",
"x_confidence": 0.91,
"x_evidence": "原文称 attackers manually collected additional information about remote hosts using the net.exe utility"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "一种凭证窃取技术，通过 LDAP 查询收集数据",
"id": "attack-pattern--10c1595e-a097-445d-be48-3b99e0883af2",
"modified": "2026-11-03T04:47:16Z",
"name": "Kerberoasting",
"spec_version": "2.1",
"type": "attack-pattern",
"x_confidence": 0.93,
"x_evidence": "原文称 agent performed LDAP queries to gather information for Kerberoasting and AS-REP Roasting attacks"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "一种凭证窃取技术，通过 LDAP 查询收集数据",
"id": "attack-pattern--946688de-56fb-4a22-9e97-da9d2d495d98",
"modified": "2026-11-03T04:47:16Z",
"name": "AS-REP Roasting",
"spec_version": "2.1",
"type": "attack-pattern",
"x_confidence": 0.93,
"x_evidence": "原文称 agent performed LDAP queries to gather information for Kerberoasting and AS-REP Roasting attacks"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "用于导出包含凭证的注册表配置单元",
"id": "tool--0c83f43e-6053-487b-851f-96d0587882b7",
"modified": "2026-11-03T04:47:16Z",
"name": "reg.exe",
"spec_version": "2.1",
"type": "tool",
"x_confidence": 0.93,
"x_evidence": "原文称 agent dumped registry hives containing credentials using the reg.exe utility"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "一种用于提取域凭证的技术",
"id": "attack-pattern--8839d28b-f04b-478c-993f-f93d0078008e",
"modified": "2026-11-03T04:47:16Z",
"name": "DCSync",
"spec_version": "2.1",
"type": "attack-pattern",
"x_confidence": 0.94,
"x_evidence": "原文称 attackers also carried out DCSync and Golden Ticket attacks via the agent using renamed mimikatz"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "用于伪造 Kerberos 票据以维持域内权限的技术",
"id": "attack-pattern--8b5337c1-36f5-4aba-a75c-bb1f1e8da67f",
"modified": "2026-11-03T04:47:16Z",
"name": "Golden Ticket",
"spec_version": "2.1",
"type": "attack-pattern",
"x_confidence": 0.94,
"x_evidence": "原文称 attackers also carried out DCSync and Golden Ticket attacks via the agent using renamed mimikatz"
},
{
"aliases": [
"wdiag2.exe"
],
"created": "2026-11-03T04:47:16Z",
"description": "用于进行 DCSync 和 Golden Ticket 攻击的工具",
"id": "tool--87efea19-e2c0-42f1-a44e-545d74fa32f0",
"modified": "2026-11-03T04:47:16Z",
"name": "mimikatz",
"spec_version": "2.1",
"type": "tool",
"x_confidence": 0.95,
"x_evidence": "原文称 using a renamed version of the mimikatz utility"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "用于横向移动的工具包",
"id": "tool--cff2f74f-cdc9-4dba-a67b-cbe9fd2201b3",
"modified": "2026-11-03T04:47:16Z",
"name": "Impacket",
"spec_version": "2.1",
"type": "tool",
"x_confidence": 0.9,
"x_evidence": "原文称 attackers employed utilities from the Impacket toolkit, specifically WMIExec"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "Impacket 中的工具，用于通过 WMI 执行命令",
"id": "tool--a712a24b-307b-4cae-8c69-46cd7693fd65",
"modified": "2026-11-03T04:47:16Z",
"name": "WMIExec",
"spec_version": "2.1",
"type": "tool",
"x_confidence": 0.92,
"x_evidence": "原文称 attackers employed utilities from the Impacket toolkit, specifically WMIExec"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "Windows 管理规范协议，被用于横向移动和远程命令执行",
"id": "tool--472def6f-0890-4d5d-ba46-81a5b71e3214",
"modified": "2026-11-03T04:47:16Z",
"name": "WMI",
"spec_version": "2.1",
"type": "tool",
"x_confidence": 0.88,
"x_evidence": "原文称 WMI protocol is used to remotely execute commands and distribute p1.ps1"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "用于通过 WMI 进行横向移动的 PowerShell cmdlet",
"id": "tool--7d8dc68c-0ade-4e60-afad-75a33cdc1b5f",
"modified": "2026-11-03T04:47:16Z",
"name": "Invoke-CimMethod",
"spec_version": "2.1",
"type": "tool",
"x_confidence": 0.92,
"x_evidence": "原文称 A second method of lateral movement via WMI uses the Invoke-CimMethod cmdlet"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "原文标注为 Windows Beacon C2 地址",
"id": "ipv4-addr--8478b8ba-7eb7-43d6-af02-20b0413f28a3",
"modified": "2026-11-03T04:47:16Z",
"name": "185.186.245.144",
"spec_version": "2.1",
"type": "ipv4-addr",
"x_confidence": 0.97,
"x_evidence": "原文 IOC: 185.186.245[.]144 C2 for Windows Beacon"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "反向 shell 连接 C2 的 IP 和端口",
"id": "url--48e8a058-5851-4e7b-87a1-be56a3fda455",
"modified": "2026-11-03T04:47:16Z",
"name": "tcp://185.186.245.144:5501",
"spec_version": "2.1",
"type": "url",
"x_confidence": 0.95,
"x_evidence": "原文称 p1.ps1 connects to server at 185.186.245[.]144:5501"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "原文标注为 Windows Beacon C2 域名",
"id": "domain-name--f7da7e38-d74d-4624-87f6-06d487f2106e",
"modified": "2026-11-03T04:47:16Z",
"name": "fastcdn.bar",
"spec_version": "2.1",
"type": "domain-name",
"x_confidence": 0.97,
"x_evidence": "原文 IOC: fastcdn[.]bar C2 for Windows Beacon"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "原文标注为 Linux Beacon C2 域名",
"id": "domain-name--b1a11267-2c04-4fa7-83f6-df62bd98c211",
"modified": "2026-11-03T04:47:16Z",
"name": "media.fastcdn.bar",
"spec_version": "2.1",
"type": "domain-name",
"x_confidence": 0.97,
"x_evidence": "原文 IOC: media.fastcdn[.]bar C2 for Linux Beacon"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "原文标注为载荷分发与 Linux Beacon C2",
"id": "ipv4-addr--e0b77a3a-9bdd-42b9-b26f-27321ade0397",
"modified": "2026-11-03T04:47:16Z",
"name": "104.234.26.163",
"spec_version": "2.1",
"type": "ipv4-addr",
"x_confidence": 0.97,
"x_evidence": "原文 IOC: 104.234.26[.]163 C2 for Payload Delivery + Linux Beacon"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "用于检查互联网访问并获取外部 IP 的中国服务域名",
"id": "domain-name--58885801-ed3e-4591-b845-d078319fe014",
"modified": "2026-11-03T04:47:16Z",
"name": "dnslog.cn",
"spec_version": "2.1",
"type": "domain-name",
"x_confidence": 0.9,
"x_evidence": "原文称 attackers manually checked for internet access and obtained external IP addresses ... using Chinese service dnslog[.]cn"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "本次活动的受害目标，非洲和拉丁美洲的教育机构",
"id": "identity--bb725bae-48d3-44a5-8ce9-1735ca6625e6",
"modified": "2026-11-03T04:47:16Z",
"name": "Educational Institutions in Africa and Latin America",
"spec_version": "2.1",
"type": "identity",
"x_confidence": 0.9,
"x_evidence": "原文称 Confirmed victims ... included organizations in the education sector in several countries across Africa and Latin America"
},
{
"created": "2026-11-03T04:47:16Z",
"first_observed": "2026-11-03T04:47:16Z",
"id": "observed-data--55132e38-8213-49fc-ae26-2ebb6b75a4d8",
"last_observed": "2026-11-03T04:47:16Z",
"modified": "2026-11-03T04:47:16Z",
"number_observed": 1,
"objects": {
"0": {
"aliases": [],
"confidence": 0.92,
"description": "攻击者最初获取访问权限并执行代码的进程，版本 16.0.1000",
"evidence": "原文称 The first malicious commands ... originated from the sqlservr.exe process, indicating likely initial access vector",
"name": "sqlservr.exe",
"type": "process"
},
"1": {
"aliases": [],
"confidence": 0.9,
"description": "伪装成合法系统进程的 CyberStrikeAI agent，Windows Beacon 样本",
"evidence": "原文称 agent can be disguised as legitimate system process ... mimics svchosts.exe",
"name": "svchosts.exe",
"type": "file"
},
"2": {
"aliases": [],
"confidence": 0.94,
"description": "连接到 C2 服务器的反弹 shell 脚本",
"evidence": "原文称 The payload (p1.ps1) ... is a reverse shell that connects to the server at 185.186.245[.]144:5501",
"name": "p1.ps1",
"type": "file"
},
"3": {
"aliases": [],
"confidence": 0.9,
"description": "保存数据库连接设置的文件",
"evidence": "原文称 dsn_line.txt is populated by ... searches for a DSN string ... and copies its contents to dsn_line.txt",
"name": "dsn_line.txt",
"type": "file"
},
"4": {
"aliases": [],
"confidence": 0.9,
"description": "SQL Server Reporting Services 配置文件，被读取以获取 DSN 字符串",
"evidence": "原文称 rsreportserver.config file is searched for DSN string containing connection settings",
"name": "rsreportserver.config",
"type": "file"
},
"5": {
"aliases": [],
"confidence": 0.93,
"description": "包含凭证的进程，被攻击者转储内存",
"evidence": "原文称 agent dumped the lsass.exe process using the MiniDump function",
"name": "lsass.exe",
"type": "process"
},
"6": {
"aliases": [],
"confidence": 0.94,
"description": "用于通过 MiniDump 函数转储 lsass.exe 的库",
"evidence": "原文称 agent dumped the lsass.exe process using the MiniDump function of the comsvcs.dll library",
"name": "comsvcs.dll",
"type": "file"
},
"7": {
"aliases": [],
"confidence": 0.9,
"description": "被攻击者使用的横向移动工具",
"evidence": "原文称 RogueWinRM.exe tool sample hash ... and used by attackers",
"name": "RogueWinRM.exe",
"type": "file"
},
"8": {
"aliases": [],
"confidence": 0.9,
"description": "恶意载荷文件，Windows Beacon 样本",
"evidence": "原文称 CyberStrikeAI Windows Beacon ... 2770562... c:\\windows\\temp\\svcmon32.exe",
"name": "svcmon32.exe",
"type": "file"
},
"9": {
"aliases": [],
"confidence": 0.9,
"description": "重命名的 mimikatz 样本，路径为 C:\\Windows\\Temp\\wdiag2.exe",
"evidence": "原文 IOC: 29EFD... C:\\Windows\\Temp\\wdiag2.exe (mimikatz)",
"name": "wdiag2.exe",
"type": "file"
},
"10": {
"aliases": [],
"confidence": 0.9,
"description": "Linux Beacon 样本哈希",
"evidence": "原文 IOC: 09e1da2afa1216ecc55648ec8e122d2a CyberStrikeAI Linux Beacon",
"name": "09e1da2afa1216ecc55648ec8e122d2a",
"type": "file"
},
"11": {
"aliases": [],
"confidence": 0.9,
"description": "Linux Beacon 样本哈希",
"evidence": "原文 IOC: 805B9E4AE74C903787416800999B8418 CyberStrikeAI Linux Beacon",
"name": "805b9e4ae74c903787416800999b8418",
"type": "file"
},
"12": {
"aliases": [],
"confidence": 0.88,
"description": "恶意脚本被分片写入的 Base64 文件",
"evidence": "原文称 several script fragments written to the file d3.b64",
"name": "d3.b64",
"type": "file"
}
},
"spec_version": "2.1",
"type": "observed-data"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "操作员使用CyberStrikeAI框架规划动作并生成命令",
"id": "relationship--a7303321-a637-4c81-b39a-c29ca273b444",
"modified": "2026-11-03T04:47:16Z",
"relationship_type": "uses",
"source_ref": "intrusion-set--cf2743cf-76df-4fc5-a748-8cfe0d574da3",
"spec_version": "2.1",
"target_ref": "tool--bcab53b8-c090-4f51-bfde-bd0098275bea",
"type": "relationship",
"x_confidence": 0.93,
"x_evidence": "原文称 CyberStrikeAI played a key role ... attackers used framework"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "操作员在人工阶段使用PowerShell执行Base64编码命令",
"id": "relationship--3f1f9c54-697b-4660-a48b-53adb1d39cd2",
"modified": "2026-11-03T04:47:16Z",
"relationship_type": "uses",
"source_ref": "intrusion-set--cf2743cf-76df-4fc5-a748-8cfe0d574da3",
"spec_version": "2.1",
"target_ref": "tool--d262d9e2-0c45-4dc9-85cf-68bd4d756b2f",
"type": "relationship",
"x_confidence": 0.92,
"x_evidence": "原文称 human operator manually used PowerShell to execute Base64 encoded commands"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "操作员使用重命名的mimikatz执行凭证攻击",
"id": "relationship--bb9a30ba-aff9-46ee-bdcd-0b90bd119920",
"modified": "2026-11-03T04:47:16Z",
"relationship_type": "uses",
"source_ref": "intrusion-set--cf2743cf-76df-4fc5-a748-8cfe0d574da3",
"spec_version": "2.1",
"target_ref": "tool--87efea19-e2c0-42f1-a44e-545d74fa32f0",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文称 attackers used renamed mimikatz via agent"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "操作员使用Impacket工具包进行横向移动",
"id": "relationship--b3ac5416-763b-4c9c-9719-86d9a871fe86",
"modified": "2026-11-03T04:47:16Z",
"relationship_type": "uses",
"source_ref": "intrusion-set--cf2743cf-76df-4fc5-a748-8cfe0d574da3",
"spec_version": "2.1",
"target_ref": "tool--cff2f74f-cdc9-4dba-a67b-cbe9fd2201b3",
"type": "relationship",
"x_confidence": 0.91,
"x_evidence": "原文称 attackers employed utilities from Impacket toolkit"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "操作员使用RogueWinRM.exe进行横向移动",
"id": "relationship--d800d1dd-d8ad-4a23-a8ea-1a19e9d1c19b",
"modified": "2026-11-03T04:47:16Z",
"relationship_type": "uses",
"source_ref": "intrusion-set--cf2743cf-76df-4fc5-a748-8cfe0d574da3",
"spec_version": "2.1",
"target_ref": "observed-data--55132e38-8213-49fc-ae26-2ebb6b75a4d8",
"type": "relationship",
"x_confidence": 0.88,
"x_evidence": "原文称 RogueWinRM.exe used"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "操作员手动使用net.exe收集远程主机信息",
"id": "relationship--b9657157-38c4-4802-9ed3-3ce3439acc83",
"modified": "2026-11-03T04:47:16Z",
"relationship_type": "uses",
"source_ref": "intrusion-set--cf2743cf-76df-4fc5-a748-8cfe0d574da3",
"spec_version": "2.1",
"target_ref": "tool--436c0efd-e502-4b67-982d-db3124dcb956",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文称 attackers manually collected additional information about remote hosts using net.exe"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "操作员使用dnslog.cn检查互联网访问并获取外部IP",
"id": "relationship--0a9beaf0-f4ce-4030-80f4-0e7bc113b189",
"modified": "2026-11-03T04:47:16Z",
"relationship_type": "uses",
"source_ref": "intrusion-set--cf2743cf-76df-4fc5-a748-8cfe0d574da3",
"spec_version": "2.1",
"target_ref": "domain-name--58885801-ed3e-4591-b845-d078319fe014",
"type": "relationship",
"x_confidence": 0.88,
"x_evidence": "原文称 attackers manually checked internet access using dnslog.cn"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "攻击活动针对教育机构",
"id": "relationship--6872f933-1b84-4cde-a6fa-8ebb6bf9fb23",
"modified": "2026-11-03T04:47:16Z",
"relationship_type": "targets",
"source_ref": "intrusion-set--cf2743cf-76df-4fc5-a748-8cfe0d574da3",
"spec_version": "2.1",
"target_ref": "identity--bb725bae-48d3-44a5-8ce9-1735ca6625e6",
"type": "relationship",
"x_confidence": 0.95,
"x_evidence": "原文称 Confirmed victims included organizations in education sector"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "CyberStrikeAI使用svchosts.exe作为Windows Beacon agent",
"id": "relationship--0904abd6-cbf6-4575-b59c-53e8bdb31657",
"modified": "2026-11-03T04:47:16Z",
"relationship_type": "uses",
"source_ref": "tool--bcab53b8-c090-4f51-bfde-bd0098275bea",
"spec_version": "2.1",
"target_ref": "observed-data--55132e38-8213-49fc-ae26-2ebb6b75a4d8",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文称 CyberStrikeAI agent deployed as svchosts.exe"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "CyberStrikeAI使用svcmon32.exe作为Windows Beacon agent",
"id": "relationship--a8cf1549-4687-4732-8c76-2aa090ee8e39",
"modified": "2026-11-03T04:47:16Z",
"relationship_type": "uses",
"source_ref": "tool--bcab53b8-c090-4f51-bfde-bd0098275bea",
"spec_version": "2.1",
"target_ref": "observed-data--55132e38-8213-49fc-ae26-2ebb6b75a4d8",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文称 CyberStrikeAI Windows Beacon svcmon32.exe"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "CyberStrikeAI使用Linux Beacon样本09e1da2afa1216ecc55648ec8e122d2a",
"id": "relationship--092cbfc0-4517-4cc8-a166-302f94aec6f8",
"modified": "2026-11-03T04:47:16Z",
"relationship_type": "uses",
"source_ref": "tool--bcab53b8-c090-4f51-bfde-bd0098275bea",
"spec_version": "2.1",
"target_ref": "observed-data--55132e38-8213-49fc-ae26-2ebb6b75a4d8",
"type": "relationship",
"x_confidence": 0.88,
"x_evidence": "原文称 CyberStrikeAI Linux Beacon hash 09e1da2afa1216ecc55648ec8e122d2a"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "CyberStrikeAI使用Linux Beacon样本805b9e4ae74c903787416800999b8418",
"id": "relationship--aebed0f2-193d-4abc-b2b9-fd83846cca41",
"modified": "2026-11-03T04:47:16Z",
"relationship_type": "uses",
"source_ref": "tool--bcab53b8-c090-4f51-bfde-bd0098275bea",
"spec_version": "2.1",
"target_ref": "observed-data--55132e38-8213-49fc-ae26-2ebb6b75a4d8",
"type": "relationship",
"x_confidence": 0.88,
"x_evidence": "原文称 CyberStrikeAI Linux Beacon hash 805b9e4ae74c903787416800999b8418"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "恶意命令来自sqlservr.exe进程上下文并执行PowerShell",
"id": "relationship--8b8d14cf-d76a-4399-a926-d4a0594ffa46",
"modified": "2026-11-03T04:47:16Z",
"relationship_type": "uses",
"source_ref": "observed-data--55132e38-8213-49fc-ae26-2ebb6b75a4d8",
"spec_version": "2.1",
"target_ref": "tool--d262d9e2-0c45-4dc9-85cf-68bd4d756b2f",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文称 first malicious commands originated from sqlservr.exe process context and used PowerShell"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "PowerShell将恶意脚本分片写入d3.b64",
"id": "relationship--2773b791-d656-4e6b-96cc-ba19ffce62ed",
"modified": "2026-11-03T04:47:16Z",
"relationship_type": "drops",
"source_ref": "tool--d262d9e2-0c45-4dc9-85cf-68bd4d756b2f",
"spec_version": "2.1",
"target_ref": "observed-data--55132e38-8213-49fc-ae26-2ebb6b75a4d8",
"type": "relationship",
"x_confidence": 0.85,
"x_evidence": "原文称 several script fragments written to the file d3.b64"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "PowerShell使用certutil解码Base64编码的脚本",
"id": "relationship--9c5059c9-716f-4f3e-abb1-0466da2e2888",
"modified": "2026-11-03T04:47:16Z",
"relationship_type": "uses",
"source_ref": "tool--d262d9e2-0c45-4dc9-85cf-68bd4d756b2f",
"spec_version": "2.1",
"target_ref": "tool--237eccc7-0bb0-420d-b0ef-251418ad77de",
"type": "relationship",
"x_confidence": 0.85,
"x_evidence": "原文称 attackers used certutil to decode file"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "PowerShell读取rsreportserver.config以获取DSN字符串",
"id": "relationship--64279f8b-087a-4940-baac-6cb5e85cfa25",
"modified": "2026-11-03T04:47:16Z",
"relationship_type": "uses",
"source_ref": "tool--d262d9e2-0c45-4dc9-85cf-68bd4d756b2f",
"spec_version": "2.1",
"target_ref": "observed-data--55132e38-8213-49fc-ae26-2ebb6b75a4d8",
"type": "relationship",
"x_confidence": 0.86,
"x_evidence": "原文称 command searches DSN string in SQL Server Reporting Services config file rsreportserver.config"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "PowerShell生成dsn_line.txt文件",
"id": "relationship--f42c98b8-2866-4f11-a0de-39f4fcf1138b",
"modified": "2026-11-03T04:47:16Z",
"relationship_type": "drops",
"source_ref": "tool--d262d9e2-0c45-4dc9-85cf-68bd4d756b2f",
"spec_version": "2.1",
"target_ref": "observed-data--55132e38-8213-49fc-ae26-2ebb6b75a4d8",
"type": "relationship",
"x_confidence": 0.85,
"x_evidence": "原文称 copies its contents to dsn_line.txt"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "PowerShell使用dsn_line.txt解密DPAPI秘密",
"id": "relationship--d4fa3c74-222e-4143-8d56-4e27689a1808",
"modified": "2026-11-03T04:47:16Z",
"relationship_type": "uses",
"source_ref": "tool--d262d9e2-0c45-4dc9-85cf-68bd4d756b2f",
"spec_version": "2.1",
"target_ref": "observed-data--55132e38-8213-49fc-ae26-2ebb6b75a4d8",
"type": "relationship",
"x_confidence": 0.88,
"x_evidence": "原文称 script decrypts DPAPI secrets from C:\\ProgramData\\dsn_line.txt"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "CyberStrikeAI agent使用schtasks创建计划任务以SYSTEM权限运行载荷",
"id": "relationship--8461adf7-979b-42a7-9a9e-2a7ec476f3e6",
"modified": "2026-11-03T04:47:16Z",
"relationship_type": "uses",
"source_ref": "observed-data--55132e38-8213-49fc-ae26-2ebb6b75a4d8",
"spec_version": "2.1",
"target_ref": "tool--189c9825-049c-44c6-a9be-a2331361ff85",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文称 agent on remote hosts often created scheduled tasks"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "CyberStrikeAI agent使用Schedule.Service COM对象创建任务作为schtasks替代",
"id": "relationship--516aac2c-f220-4b90-b308-d9aee57584fa",
"modified": "2026-11-03T04:47:16Z",
"relationship_type": "uses",
"source_ref": "observed-data--55132e38-8213-49fc-ae26-2ebb6b75a4d8",
"spec_version": "2.1",
"target_ref": "tool--c26533c7-22da-474d-ad69-e3440a9ee090",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文称 alternative method ... Schedule.Service COM object"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "植入体创建名为SystemUpdate的计划任务实现持久化",
"id": "relationship--4bd593dd-cea6-4a32-b42a-222dd2c7c041",
"modified": "2026-11-03T04:47:16Z",
"relationship_type": "uses",
"source_ref": "observed-data--55132e38-8213-49fc-ae26-2ebb6b75a4d8",
"spec_version": "2.1",
"target_ref": "tool--cc03eb17-b501-4ab0-8c83-76983e1bf52c",
"type": "relationship",
"x_confidence": 0.8,
"x_evidence": "原文称 agent created scheduled task named SystemUpdate"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "植入体通过注册表Run键添加SystemUpdate值实现持久化",
"id": "relationship--6f893b2b-b8e1-4628-86e5-4c6fa1429c18",
"modified": "2026-11-03T04:47:16Z",
"relationship_type": "uses",
"source_ref": "observed-data--55132e38-8213-49fc-ae26-2ebb6b75a4d8",
"spec_version": "2.1",
"target_ref": "tool--1714c10c-b76e-4bcb-b7c8-c4081a64ec0c",
"type": "relationship",
"x_confidence": 0.8,
"x_evidence": "原文称 adding a value to registry key ... Run"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "CyberStrikeAI agent使用PowerShell内置功能进行侦察和发现",
"id": "relationship--7e84b99e-d184-45b8-abac-eb0ff432532c",
"modified": "2026-11-03T04:47:16Z",
"relationship_type": "uses",
"source_ref": "observed-data--55132e38-8213-49fc-ae26-2ebb6b75a4d8",
"spec_version": "2.1",
"target_ref": "tool--d262d9e2-0c45-4dc9-85cf-68bd4d756b2f",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文称 CyberStrikeAI agent uses PowerShell built-in functionality for discovery"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "agent通过共享网络文件夹和WMI协议分发p1.ps1",
"id": "relationship--d8b06c31-b48a-483f-a977-c7bf9b46e9f1",
"modified": "2026-11-03T04:47:16Z",
"relationship_type": "uses",
"source_ref": "observed-data--55132e38-8213-49fc-ae26-2ebb6b75a4d8",
"spec_version": "2.1",
"target_ref": "observed-data--55132e38-8213-49fc-ae26-2ebb6b75a4d8",
"type": "relationship",
"x_confidence": 0.85,
"x_evidence": "原文称 agent distributed p1.ps1 via WMI"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "Windows Beacon agent与185.186.245.144通信",
"id": "relationship--ffbcad4f-8737-4cea-baa0-2c924f89970a",
"modified": "2026-11-03T04:47:16Z",
"relationship_type": "communicates-with",
"source_ref": "observed-data--55132e38-8213-49fc-ae26-2ebb6b75a4d8",
"spec_version": "2.1",
"target_ref": "ipv4-addr--8478b8ba-7eb7-43d6-af02-20b0413f28a3",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文称 Windows Beacon C2 IP 185.186.245.144"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "Windows Beacon agent与fastcdn.bar通信",
"id": "relationship--77782dbb-c728-4cb6-85c4-fecfc5759422",
"modified": "2026-11-03T04:47:16Z",
"relationship_type": "communicates-with",
"source_ref": "observed-data--55132e38-8213-49fc-ae26-2ebb6b75a4d8",
"spec_version": "2.1",
"target_ref": "domain-name--f7da7e38-d74d-4624-87f6-06d487f2106e",
"type": "relationship",
"x_confidence": 0.95,
"x_evidence": "原文称 Windows Beacon C2 domain fastcdn.bar"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "svcmon32.exe Windows Beacon与185.186.245.144通信",
"id": "relationship--37b26cfd-d781-4522-9b95-883d7693131c",
"modified": "2026-11-03T04:47:16Z",
"relationship_type": "communicates-with",
"source_ref": "observed-data--55132e38-8213-49fc-ae26-2ebb6b75a4d8",
"spec_version": "2.1",
"target_ref": "ipv4-addr--8478b8ba-7eb7-43d6-af02-20b0413f28a3",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文称 Windows Beacon C2 IP"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "svcmon32.exe Windows Beacon与fastcdn.bar通信",
"id": "relationship--5e5696f1-e8f6-4c06-bc0d-fab3ffdc5180",
"modified": "2026-11-03T04:47:16Z",
"relationship_type": "communicates-with",
"source_ref": "observed-data--55132e38-8213-49fc-ae26-2ebb6b75a4d8",
"spec_version": "2.1",
"target_ref": "domain-name--f7da7e38-d74d-4624-87f6-06d487f2106e",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文称 Windows Beacon C2 domain"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "反向Shell脚本p1.ps1连接tcp://185.186.245.144:5501",
"id": "relationship--c5deeb08-e46b-4447-95bc-0deab5bdc60e",
"modified": "2026-11-03T04:47:16Z",
"relationship_type": "communicates-with",
"source_ref": "observed-data--55132e38-8213-49fc-ae26-2ebb6b75a4d8",
"spec_version": "2.1",
"target_ref": "url--48e8a058-5851-4e7b-87a1-be56a3fda455",
"type": "relationship",
"x_confidence": 0.96,
"x_evidence": "原文称 p1.ps1 connects to server at 185.186.245[.]144:5501"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "Linux Beacon样本09e1与media.fastcdn.bar通信",
"id": "relationship--95f47d54-917a-47c8-a9cb-2692a0454917",
"modified": "2026-11-03T04:47:16Z",
"relationship_type": "communicates-with",
"source_ref": "observed-data--55132e38-8213-49fc-ae26-2ebb6b75a4d8",
"spec_version": "2.1",
"target_ref": "domain-name--b1a11267-2c04-4fa7-83f6-df62bd98c211",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文称 Linux Beacon C2 domain media.fastcdn.bar"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "Linux Beacon样本09e1与104.234.26.163通信",
"id": "relationship--d9190293-70dd-4c50-bfd5-ed4ab7a5ca87",
"modified": "2026-11-03T04:47:16Z",
"relationship_type": "communicates-with",
"source_ref": "observed-data--55132e38-8213-49fc-ae26-2ebb6b75a4d8",
"spec_version": "2.1",
"target_ref": "ipv4-addr--e0b77a3a-9bdd-42b9-b26f-27321ade0397",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文称 104.234.26.163 C2 for Linux Beacon"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "Linux Beacon样本805b与media.fastcdn.bar通信",
"id": "relationship--31413b2f-c40b-41f4-9ba9-469661085aef",
"modified": "2026-11-03T04:47:16Z",
"relationship_type": "communicates-with",
"source_ref": "observed-data--55132e38-8213-49fc-ae26-2ebb6b75a4d8",
"spec_version": "2.1",
"target_ref": "domain-name--b1a11267-2c04-4fa7-83f6-df62bd98c211",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文称 Linux Beacon C2 domain media.fastcdn.bar"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "Linux Beacon样本805b与104.234.26.163通信",
"id": "relationship--1b8d95b0-8079-4854-80ba-ccaf0af8a96f",
"modified": "2026-11-03T04:47:16Z",
"relationship_type": "communicates-with",
"source_ref": "observed-data--55132e38-8213-49fc-ae26-2ebb6b75a4d8",
"spec_version": "2.1",
"target_ref": "ipv4-addr--e0b77a3a-9bdd-42b9-b26f-27321ade0397",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文称 Linux Beacon C2 IP 104.234.26.163"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "PowerShell通过LDAP查询收集Kerberoasting所需数据",
"id": "relationship--8ef3c032-eb78-4a05-94f5-fb20af28fbaa",
"modified": "2026-11-03T04:47:16Z",
"relationship_type": "uses",
"source_ref": "tool--d262d9e2-0c45-4dc9-85cf-68bd4d756b2f",
"spec_version": "2.1",
"target_ref": "attack-pattern--10c1595e-a097-445d-be48-3b99e0883af2",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文称 agent performed LDAP queries to gather information for Kerberoasting"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "PowerShell通过LDAP查询收集AS-REP Roasting所需数据",
"id": "relationship--91adfa18-6673-43d5-9788-82bbca0d9322",
"modified": "2026-11-03T04:47:16Z",
"relationship_type": "uses",
"source_ref": "tool--d262d9e2-0c45-4dc9-85cf-68bd4d756b2f",
"spec_version": "2.1",
"target_ref": "attack-pattern--946688de-56fb-4a22-9e97-da9d2d495d98",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文称 agent performed LDAP queries to gather information for AS-REP Roasting"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "PowerShell评估msiexec的AlwaysInstallElevated键以判断权限提升",
"id": "relationship--33bbd39e-f794-425d-a037-55f3f079be1d",
"modified": "2026-11-03T04:47:16Z",
"relationship_type": "uses",
"source_ref": "tool--d262d9e2-0c45-4dc9-85cf-68bd4d756b2f",
"spec_version": "2.1",
"target_ref": "tool--e5c50180-410a-49bc-a6b8-e1732b4e736b",
"type": "relationship",
"x_confidence": 0.82,
"x_evidence": "原文称 agent generated script to exploit msiexec AlwaysInstallElevated"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "PowerShell使用Invoke-CimMethod进行横向移动",
"id": "relationship--89afb5ae-cd9a-4856-a8a2-858ca6f643fd",
"modified": "2026-11-03T04:47:16Z",
"relationship_type": "uses",
"source_ref": "tool--d262d9e2-0c45-4dc9-85cf-68bd4d756b2f",
"spec_version": "2.1",
"target_ref": "tool--7d8dc68c-0ade-4e60-afad-75a33cdc1b5f",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文称 second method lateral movement via WMI uses Invoke-CimMethod"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "comsvcs.dll使用MiniDump函数转储lsass.exe进程内存",
"id": "relationship--d9e8c9f6-e0ac-4d0a-b29e-bb4bd7c3acec",
"modified": "2026-11-03T04:47:16Z",
"relationship_type": "uses",
"source_ref": "observed-data--55132e38-8213-49fc-ae26-2ebb6b75a4d8",
"spec_version": "2.1",
"target_ref": "observed-data--55132e38-8213-49fc-ae26-2ebb6b75a4d8",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文称 comsvcs.dll MiniDump used to dump lsass.exe"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "mimikatz用于执行DCSync攻击",
"id": "relationship--c5373377-5e60-4ca5-a63c-4725745310e3",
"modified": "2026-11-03T04:47:16Z",
"relationship_type": "uses",
"source_ref": "tool--87efea19-e2c0-42f1-a44e-545d74fa32f0",
"spec_version": "2.1",
"target_ref": "attack-pattern--8839d28b-f04b-478c-993f-f93d0078008e",
"type": "relationship",
"x_confidence": 0.94,
"x_evidence": "原文称 mimikatz used for DCSync"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "mimikatz用于执行Golden Ticket攻击",
"id": "relationship--12c5bfcf-fa9f-4d96-95a9-5b9b3a1d36da",
"modified": "2026-11-03T04:47:16Z",
"relationship_type": "uses",
"source_ref": "tool--87efea19-e2c0-42f1-a44e-545d74fa32f0",
"spec_version": "2.1",
"target_ref": "attack-pattern--8b5337c1-36f5-4aba-a75c-bb1f1e8da67f",
"type": "relationship",
"x_confidence": 0.94,
"x_evidence": "原文称 mimikatz used for Golden Ticket"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "重命名的mimikatz对应文件wdiag2.exe",
"id": "relationship--8be9e01a-a43f-458a-b30b-d682ea25e8d3",
"modified": "2026-11-03T04:47:16Z",
"relationship_type": "uses",
"source_ref": "tool--87efea19-e2c0-42f1-a44e-545d74fa32f0",
"spec_version": "2.1",
"target_ref": "observed-data--55132e38-8213-49fc-ae26-2ebb6b75a4d8",
"type": "relationship",
"x_confidence": 0.85,
"x_evidence": "原文称 renamed mimikatz file wdiag2.exe"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "Impacket工具包使用WMIExec",
"id": "relationship--d3439af2-3537-4498-8e1e-529b1af32cde",
"modified": "2026-11-03T04:47:16Z",
"relationship_type": "uses",
"source_ref": "tool--cff2f74f-cdc9-4dba-a67b-cbe9fd2201b3",
"spec_version": "2.1",
"target_ref": "tool--a712a24b-307b-4cae-8c69-46cd7693fd65",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文称 Impacket toolkit specifically WMIExec"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "WMIExec通过WMI远程执行命令",
"id": "relationship--c6824cfe-1ef5-417e-88ae-c8388ee540bd",
"modified": "2026-11-03T04:47:16Z",
"relationship_type": "uses",
"source_ref": "tool--a712a24b-307b-4cae-8c69-46cd7693fd65",
"spec_version": "2.1",
"target_ref": "tool--472def6f-0890-4d5d-ba46-81a5b71e3214",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文称 WMIExec via WMI executes commands"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "Invoke-CimMethod通过WMI远程执行命令",
"id": "relationship--721f3992-dc22-49df-9659-0d9fc1656078",
"modified": "2026-11-03T04:47:16Z",
"relationship_type": "uses",
"source_ref": "tool--7d8dc68c-0ade-4e60-afad-75a33cdc1b5f",
"spec_version": "2.1",
"target_ref": "tool--472def6f-0890-4d5d-ba46-81a5b71e3214",
"type": "relationship",
"x_confidence": 0.9,
"x_evidence": "原文称 Invoke-CimMethod via WMI"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "agent使用reg.exe导出包含凭证的注册表配置单元",
"id": "relationship--16024a17-0243-490c-abd8-12f8046236b5",
"modified": "2026-11-03T04:47:16Z",
"relationship_type": "uses",
"source_ref": "observed-data--55132e38-8213-49fc-ae26-2ebb6b75a4d8",
"spec_version": "2.1",
"target_ref": "tool--0c83f43e-6053-487b-851f-96d0587882b7",
"type": "relationship",
"x_confidence": 0.93,
"x_evidence": "原文称 agent dumped registry hives containing credentials using reg.exe utility"
},
{
"created": "2026-11-03T04:47:16Z",
"description": "certutil解码d3.b64文件",
"id": "relationship--297f6bfe-dcb1-41be-9245-e0fbd179057c",
"modified": "2026-11-03T04:47:16Z",
"relationship_type": "uses",
"source_ref": "tool--237eccc7-0bb0-420d-b0ef-251418ad77de",
"spec_version": "2.1",
"target_ref": "observed-data--55132e38-8213-49fc-ae26-2ebb6b75a4d8",
"type": "relationship",
"x_confidence": 0.85,
"x_evidence": "原文称 certutil to decode the resulting file d3.b64"
}
],
"spec_version": "2.1",
"type": "bundle"
}报告链接：
https://securelist.com/tr/cyberstrikeai-attacks/121715/
───────────────────────────────────
（八）VOLTA用大模型筛选受害者和资产
事件名称：VOLTA信息窃取木马利用模型进行受害者优先级排序
发布日期：2026-10-31
发布机构：Cisco Talos
威胁概述：
Cisco Talos披露的VOLTA是一款可自删除的Windows信息窃取木马，可收集浏览器凭据、会话令牌及加密钱包数据。配置模型访问密钥后，木马会整理已获取的证据，通过OpenRouter向大模型提交材料，生成受害者画像并按资产价值排序。研究记录了模型拒绝后的备用模型切换机制。
模型参与的是窃取完成后的筛选环节，缺少API密钥时木马仍可独立执行窃密。处置应保全终端进程、网络和本地收集日志，撤销可能被窃取的会话令牌，并结合登录审计核查账户异常。若样本接触过钱包种子短语或私钥，应按相关资产凭据已暴露处理。
IOC指标：
· SHA256：57ef4242666d78c50df145b34023df564f0fad38812d6a580e66433d427e2279
报告链接：
───────────────────────────────────
三、本周AI安全风险观察
泄露凭据的影响范围取决于应用已有权限。多租户应用的源端密钥可被用来进入多个下游租户，单一仓库的泄露可能演变为多租户事件。确定处置范围时，应把服务主体权限和实际资源访问记录放在一起核对。
智能体参与攻击的阶段存在差异。微软和卡巴斯基观察到它参与实际云资源操作或入侵后编排。VOLTA在数据已被盗取后才调用模型做优先级排序。检测规则应围绕各阶段的可观测行为设计。
推理额度已经成为可转售的资源。被盗凭据通过网关聚合后，调用来源和原始凭据所有者之间的关系更难追溯。计费数据、模型调用日志和身份审计需要能够按项目及密钥关联。
模型安全设置与执行环境各自承担防护职责。接口认证、MCP子进程启动授权、容器网络隔离和默认密钥管理都需要在服务端独立落实。
───────────────────────────────────
四、安全建议
处置暴露的云应用凭据：核查公开仓库和历史提交，撤销泄露的客户端密钥、证书和联合凭据。检查Entra服务主体登录、Key Vault读取、Graph请求及跨租户应用授权，按资源访问记录确定影响范围。
限制智能体执行权限：验证Agent Service的身份来源与工作区归属，控制MCP配置的创建和修改，使用受限账号启动工具进程。升级前按官方通告核对已修复版本和适用组件。
收紧沙箱与模型服务入口：移除Dify默认沙箱密钥，限制沙箱、代理与管理端口的可达范围。为模型API按应用和环境分配密钥、权限及限额，设置费用和异常调用告警。
关联终端与网络证据：对照已确认的样本哈希与C2地址，核查计划任务、LSASS访问、DCSync和WMI横向活动。针对VOLTA类窃密事件同步撤销浏览器会话，并检查受影响账号的异地访问。
控制敏感AI会话的外部访问：限制不可信网页、文档和连接器进入高敏感会话，针对下载、外部链接及工具出站请求设置网络策略和审计。
───────────────────────────────────
五、报告总结
本期主要风险是云凭据泄露后的跨租户访问、智能体辅助横向移动，以及数据和模型资源被盗用。微软记录到一起从搜索密钥到导出 Key Vault 数据约用五分钟的案例。卡巴斯基调查的教育机构攻击已发展到域级失陷。LLMJacking 则让受害组织承担未授权调用的费用。
平台侧应优先排查对外暴露的 AgentScope 服务和仍使用默认密钥的 Dify 沙箱。发现异常服务主体登录或密钥库读取时，应尽快撤销失陷凭据，核查其已访问的租户和资源。模型调用量与账单同步激增时，应追查调用来源及对应密钥。
───────────────────────────────────
报告说明
本报告由360威胁情报中心基于2026年10月31日至11月6日公开威胁情报整理形成，覆盖智能体辅助云入侵、ARTEX与CyberStrikeAI在野活动、VOLTA窃密分析、模型资源盗用及AI平台漏洞，为企业云身份、模型服务、AI应用和终端安全防护提供参考。
情报时效性：2026年10月31日—11月6日 威胁评估等级：高风险（多源情报验证）