CTI · corroborated · 2026-09-04

Chinese-Speaking Hackers Use Claude, Qwen and DeepSeek AI Agents to Attack Government Systems

Full story & timeline

Actors

Chinese-speaking threat operators

Malware / tools

SecFlow

Campaigns

—

CVEs

—

Victim sectors

GovernmentEducationIndustrial

Geography

TaiwanIndonesiaChinaVietnam

MITRE ATT&CK

T1595 Active Scanning Reconnaissance
T1190 Exploit Public-Facing Application Initial Access
T1105 Ingress Tool Transfer Command and Control
T1100 Web Shell Persistence
T1059 Command and Scripting Interpreter Execution

Indicators

No curated indicators tied to this case.

Detections

No detection content yet — case analysis did not yield signal-specific telemetry. Check back after the next daily CTI pass.

References

Source on GitHub