security1 distinct publisher
Unit 42 finds attacker-hosted NextChat in Mexico-Ecuador intrusion cluster, AI-enabled tools in second Brazil campaign
Two tracked clusters hit Mexican, Ecuadorian and Brazilian targets with living-off-the-land tradecraft, numbered batch scripts and shared SOCKS5 relays. The AI tooling they left running is the part defenders can query for.
Publishers:unit42.paloaltonetworks.com
Reality
- Evidence66
- Adoption52
- Hype gap+18
- Incentives70