BOSSAI: Inside the AI attack mesh that targeted Taiwan's emergency services

Acronis Threat Research Unit identified a single operator utilizing a mesh of 12 AI agents called BOSSAI to conduct persistent campaigns across 11 countries. The attacker deployed both abliterated and commercial AI models working in specialized roles - infrastructure builders, vulnerability scanners, and active exploitation agents. Primary targets included emergency services, universities, financial institutions, and government systems in Taiwan, Thailand, and Mexico. Confirmed breaches involved exfiltration of medical records from Taipei emergency services, student data from Thai universities, and collection of over 200,000 Mexican residential phone records. Commercial AI models repeatedly refused malicious instructions despite jailbreak attempts, forcing the operator to rely on less effective abliterated local models. The investigation exposed complete operational infrastructure including command histories, agent conversations, and victim data, revealing both the power and limitations of AI-augmented off...

• Vibe Hacking: Two AI-Augmented Campaigns Target Government and Financial Sectors in Latin AmericaMalware2026-05-12
• Hackers Impersonate IT Help Desk on Microsoft Teams to Hijack Active Directory Accounts and Steal DataMalware2026-10-31
• n0n Ransomware: Inside an AI-Assisted Extortion OperationMalware2026-10-28
• Open Season on Kapibala: Attacker Steals Over 18,000 Government Records Through WordPress ExploitationCampaign2026-09-22
• VeloCloud Orchestrator SQL Injection VulnerabilityMediumVulnerability2026-10-23