UAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux Rootkit

Cybersecurity researchers revealed that the Chinese-speaking group UAT-10147 is targeting Windows and Linux servers worldwide, exploiting known vulnerabilities and using AI tools to automate attacks including SEO fraud and data theft. The group operates at scale, leveraging AI to refine exploits and maintain persistence, with a target list of about 170,000 URLs mainly in the U.S., India, U.K., Germany, and the Netherlands.