Source profile
blog.talosintelligence.com
A field appears only when the current profile revision carries supporting evidence. Missing context stays visibly unknown.
Cisco Talos says UAT-10147, a Chinese-speaking group doing SEO fraud and data theft, wired AI tooling into exploitation, validation and persistence. An open directory gave the operation away.
Reality
Cisco Talos says UAT-10147, a Chinese-speaking crew that monetizes access through search ranking fraud, now runs a cross-platform implant with kernel-level EDR bypass and a Linux rootkit.
Reality
Cisco Talos revives a 1990s criminology method to describe intrusions as narratives, then uses a business email compromise to show which steps AI makes cheap and where defenders can push back.
Reality