UAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux Rootkit

Cybersecurity researchers disclosed details of a Chinese-speaking cybercrime group dubbed UAT-10147 targeting Windows and Linux web servers globally across education, media, technology, and gaming sectors. Most targets are in Brazil, Bolivia, China, Canada, and Vietnam. The threat activity came to light after the discovery of an open source of information, with the group using AI to scale attacks and deploying SPECTRE with EDR bypass and a Linux rootkit.