How a Single Threat Actor Used Jailbroken AI to Run Credential Theft, VoIP Fraud, and Data Exfiltration Simultaneously
In October 2026, Palo Alto Networks Unit 42 exposed a financially motivated threat actor operating under the handle BUGSTER who weaponized AI tooling—specifically the Hermes Agent framework paired with DeepSeek V4 and Cursor IDE, both with safety controls disabled—to execute multi-vector cybercrime campaigns primarily targeting Indian universities and e-commerce platforms. Operating from a single US-based server, BUGSTER leveraged AI-generated reconnaissance scripts to brute-force a university WordPress portal, exfiltrate a MongoDB database containing more than 5,200 student and faculty PII records, enumerate e-commerce API tokens and payment merchant IDs, and plan VoIP telecommunications fraud infrastructure. The actor also automated Wi-Fi password cracking via physical proximity devices and performed cryptocurrency whale reconnaissance. This incident underscores a rapidly accelerating trend: AI is collapsing the skill barrier for cybercrime. A single, relatively unsophisticated actor operated across credential theft, fraud, C2 deployment, and physical wireless attacks simultaneously—capabilities that historically required distinct specialist skill sets. The Hermes plus DeepSeek toolchain is now being adopted independently by multiple unrelated actors, signaling emergence of a new low-cost, low-friction criminal AI stack.
Kill Chain
