Chinese hackers use AI to automate attacks on 170,000 servers

📅 20 August 2026 at 14:54 UTC📰 Cyber InsiderView original source ↗

A Chinese-speaking cybercrime group is using AI-assisted tooling to automate attacks against vulnerable Windows and Linux web servers worldwide. Tracked as UAT-10147 by Cisco Talos, the threat group targets internet-facing servers for data theft and search engine optimization (SEO) fraud, combining publicly available exploits, offensive security frameworks, custom malware, and increasingly sophisticated AI-generated attack workflows. … The post Chinese hackers use AI to automate attacks on 170,000 servers appeared first on CyberInsider.

🤖 AI BriefingAuto-generated threat analysis

🔍Threat Overview

A Chinese-speaking cybercrime group is using AI-assisted tooling to automate attacks against vulnerable Windows and Linux web servers worldwide, targeting data theft and SEO fraud.

⚙️Technical Details

CVEs

CVE-2022-0847CVE-2021-3156

Affected Systems

Windows IIS serversLinux systems

Attack Vectors

LOCAL

💥Impact Assessment

Severity: High

🛡️Recommended Actions

1Patching internet-facing IIS and Linux servers

2Rotating exposed ASP.NET MachineKeys

3Restricting unnecessary administrative interfaces

📦Affected Products

Fedoraproject FedoraLinux Linux KernelNetapp H300ENetapp H300E FirmwareNetapp H300SNetapp H300S FirmwareNetapp H410CNetapp H410C FirmwareNetapp H410SNetapp H410S Firmware

🔐NVD Verified DataVERIFIED

CVE-2022-0847 ↗CVSS 7.8 — HIGH

Attack Vector

LOCAL

Complexity

LOW

Vector String

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-665

Affected Products (CPE)

Fedoraproject FedoraLinux Linux KernelNetapp H300ENetapp H300E FirmwareNetapp H300S