Attackers Expose Ongoing AI Tool Use Targeting Organizations in Latin America
2026-09-03T20:51:32Z•584756914c87b4c9f78de38516f847699842fac58fb9e4f679603cfd14eb446a
AI-assisted-attacksAI-enabled-malwareAPI-key-theftAndroid-IoTCI/CD-securityDDoSGitHub-ActionsLLM-securityLatin-AmericaMicrosoft-Entra-IDMicrosoft-TeamsToragentic-attacksblockchain-C2botnetcredential-theftdata-exfiltrationdirect-IP-communicationsidentity-phishingmalware-C2npm-supply-chainthreat-intelligencevoice-phishingzero-day-discovery
What happened
Unit 42’s August–September 2026 research covers active and emerging threats including AI-assisted intrusions, AI-enabled malware, Latin America-focused data exfiltration, Microsoft Teams voice phishing, trusted-channel identity abuse, large-scale Microsoft Entra credential attacks, Android IoT botnets, blockchain-based command and control, npm supply-chain compromise, AI API token theft, and direct-IP malware communications. The collection emphasizes identity security, supply-chain protections, endpoint and behavioral detection, resilient C2 monitoring, and layered defenses against autonomous攻
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- paloalto_unit42
- Record identifier
- 584756914c87b4c9f78de38516f847699842fac58fb9e4f679603cfd14eb446a
- Enrichment time
- 2026-09-03T20:51:32Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.