Executive Summary
Chinese-speaking group UAT-10147 uses AI to scale attacks on Windows and Linux web servers, deploying SPECTRE with an EDR bypass and a Linux rootkit.
What Happened
Cybersecurity researchers have disclosed details of a Chinese-speaking cybercrime group dubbed UAT-10147 that's targeting Windows and Linux web servers globally across the education, media, technology, and gaming sectors. The vast majority of the targets are located in Brazil, Bolivia, China, Canada, and Vietnam. Details of the threat activity came to light following the discovery of an open
Affected Products
- Windows
- Linux
Vulnerability / Attack Technique
AI-scaled server attacks
Technical Mechanism
As reported, AI helped automate attack operations at scale.
AI Security Category
AI-assisted attack
Part of the AI-Assisted Attacks topic.
RealGround Analysis
AI lets small crews run large campaigns.
Recommended Controls
- Harden internet-facing web servers
Related RealGround Service
AI Red Teaming · or start with the free AI Agent Security Scanner.
Sources
thehackernews.com: https://thehackernews.com/2026/08/uat-10147-uses-ai-to-scale-server.html
Summary and analysis written by RealGround from the source above; last updated 2026-10-18.