Published 58 minutes ago • loading... • Updated 54 minutes ago
Kazakhstan-linked hackers used AI to steal Tajik government documents, researchers say
CloudSek said the group used Hermes to automate reconnaissance and file theft, and that the stolen trove included more than 2,000 documents.
On Wednesday, Singapore-based CloudSek reported that Silent Lynx used an AI agent to steal more than 2,000 national security-related documents from Tajikistan, a hacking group tied to Kazakhstan.
The attackers employed Hermes, an open-source autonomous AI agent, after inadvertently leaving a server exposed to the internet, which allowed CloudSek researchers to discover the operation.
"Instead of typing hacking commands by hand, the attacker told Hermes what to do," CloudSek told Reuters, with the AI performing reconnaissance beginning mid-August before downloading and organizing stolen files.
Evidence recovered by CloudSek indicates the hackers speak Russian, operate during Kazakh business hours, and access servers via residential Kazakh internet connections, linking them to Kazakhstan.
Kazakh and Tajik government officials did not immediately respond to requests for comment, while exposed data contained instructions directing the AI: "You are an elite offensive security specialist and red teamer.