Hacker Deploys Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry
An attacker installed the open-source Hermes AI assistant on a rented server, disabled its permission-requesting YOLO mode, and directed it at Thailand's…
Tag: ShadowPad
Hackers Weaponize Balochistan Police Portal in Multi-Group Espionage Campaigns
Cybersecurity researchers at SentinelOne SentinelLABS have disclosed details of sustained cyber espionage activity targeting Pakistani law enforcement organizations, including the Balochistan Police,…
Mustang Panda Abuses Zoho WorkDrive as Command Channel in Indian Government Attacks
The China-aligned espionage group Mustang Panda is running two campaigns against Indian government and hydropower targets, deploying new malware and turning a…
RedEcho: China-Linked Cyber Campaign
RedEcho is a cyber campaign attributed to China-linked actors targeting India's power sector, notably using ShadowPad malware in 2021.
ShadowPad Backdoor
A modular backdoor malware previously hosted on the same staging server used in the Thai Ministry of Finance attack. It is known…