UAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux Rootkit

Researchers have uncovered a Chinese-speaking cybercrime group, UAT-10147, that is targeting web servers worldwide, primarily in Brazil, Bolivia, China, Canada, and Vietnam. The group is attacking servers across various sectors, including education, media, technology, and gaming. The targets include both Windows and Linux web servers. The discovery of the group's activities came after an open source was found, revealing details of the threat. UAT-10147's attacks involve the use of advanced techniques, including AI scaling of server attacks and deployment of malware such as SPECTRE, as well as methods to bypass endpoint detection and response systems and install a Linux rootkit. The group's global reach and sophisticated tactics make it a notable threat.