Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry

A hacker utilized a popular AI assistant, configuring it to run without permission prompts for risky commands, and targeted Thailand's Ministry of Finance. The AI agent was left to operate on its own, navigating the ministry's network in search of ways to gain root access and scanning file systems. The ministry is responsible for managing the country's treasury and tax collection. The AI agent's actions included checking hosts for potential vulnerabilities and hunting through file systems. The attack was carried out from a rented server. The AI assistant was able to work autonomously due to its configuration.