UAT-10147: The Commodity Crime Gang That Hired AI Pentesters (And Wrote a Rootkit While It Was At It)
Cisco Talos documented a financially motivated Chinese-speaking crew running agentic AI through an entire exploit chain — and its SPECTRE implant ships a Linux rootkit that boots before your EDR does.
Moderate severity, 2 of 4. Known flaw, no confirmed in-the-wild exploitation. Fix it when you next touch the box.Exploited in the wildCVE-2022-27925 +11
cisctalosuat-10147agentic-ai