Attackers Expose Ongoing AI Tool Use Targeting Organizations in Latin America
2026-09-04T20:51:32Z•55d7251201023febd861e60710bc0b4e36b01e49f318e314eba62d1e6b3072c0
AI token theft exposed to cybercrime protocolsAI-assisted attacksAI-enabled malwareAPI key theftAndroid IoTCI/CD securityDDoSGitHub ActionsLatin AmericaMicrosoft Entra IDMicrosoft Teams phishingTorUnit 42agentic attacksblockchain C2botnetscredential theftdata exfiltrationdeveloper toolsidentity attacksmalwarenpm supply chainsmart contract C2threat-intelligencevoice phishing
What happened
A Palo Alto Networks Unit 42 RSS collection covering current threat research, including AI-assisted intrusions and malware, credential and identity attacks, Microsoft Teams voice phishing, SDLC and npm supply-chain compromise, botnets, blockchain-based command and control, AI token theft, direct-to-IP malware communications, and automated vulnerability discovery. The material describes active and emerging attack techniques across enterprise, cloud, developer, IoT, and AI environments.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- paloalto_unit42
- Record identifier
- 55d7251201023febd861e60710bc0b4e36b01e49f318e314eba62d1e6b3072c0
- Enrichment time
- 2026-09-04T20:51:32Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.