{"id":1334,"date":"2026-11-02T13:28:51","date_gmt":"2026-11-02T11:28:51","guid":{"rendered":"https:\/\/familiebuckens.nl\/?p=1334"},"modified":"2026-11-04T13:29:34","modified_gmt":"2026-11-04T11:29:34","slug":"cyberstrikeai-in-the-wild-the-use-of-ai-in-real-world-attacks-on-organizations","status":"publish","type":"post","link":"https:\/\/familiebuckens.nl\/index.php\/2026\/11\/02\/cyberstrikeai-in-the-wild-the-use-of-ai-in-real-world-attacks-on-organizations\/","title":{"rendered":"CyberStrikeAI in the wild: the use of AI in real-world attacks on organizations"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">As part of proactive threat monitoring, Kaspersky\u2019s Cyber Threat Intelligence team identified a malicious campaign involving C2 agents controlled by artificial intelligence. Confirmed victims of the campaign included organizations in the education sector in several countries across Africa and Latin America. CyberStrikeAI played a key role in the post-exploitation phase. This is an open-source framework in which an LLM orchestrator on the command-and-control server plans actions, selects tools, and generates commands, while an implant executes them on compromised hosts. Using CyberStrikeAI, the attackers progressed from reconnaissance to full domain compromise.<\/p>\n\n\n<a class=\"wp-block-read-more\" href=\"https:\/\/familiebuckens.nl\/index.php\/2026\/11\/02\/cyberstrikeai-in-the-wild-the-use-of-ai-in-real-world-attacks-on-organizations\/\" target=\"_self\"><a href=\"https:\/\/securelist.com\/tr\/cyberstrikeai-attacks\/121715\/?kaspr=x43a\">CyberStrikeAI attacks educational institutions | Securelist<\/a><span class=\"screen-reader-text\">: CyberStrikeAI in the wild: the use of AI in real-world attacks on organizations<\/span><\/a>","protected":false},"excerpt":{"rendered":"<p>As part of proactive threat monitoring, Kaspersky\u2019s Cyber Threat Intelligence team identified a malicious campaign involving C2 agents controlled by artificial intelligence. Confirmed victims of the campaign included organizations in the education sector in several countries across Africa and Latin America. CyberStrikeAI played a key role in the post-exploitation phase&#8230;.<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[20],"tags":[72],"class_list":["post-1334","post","type-post","status-publish","format-standard","hentry","category-cybersecurity","tag-72"],"_links":{"self":[{"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/posts\/1334","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/comments?post=1334"}],"version-history":[{"count":1,"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/posts\/1334\/revisions"}],"predecessor-version":[{"id":1335,"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/posts\/1334\/revisions\/1335"}],"wp:attachment":[{"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/media?parent=1334"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/categories?post=1334"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/tags?post=1334"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}