Staff Reports
CloudSEK’s new technical report shines a bright, unpleasant light on how modern hackers are using artificial intelligence to do the dirty work for them. The report shows an operator tied to the Silent Lynx cluster ran an autonomous AI agent called Hermes to automate reconnaissance, theft, and cleanup of more than two thousand Tajik government documents. This isn’t sci‑fi — it’s a real attack, and it should make every national security team uncomfortable.
What CloudSEK found
CloudSEK published detailed logs showing an exposed server where the attacker ran Hermes, an open‑source autonomous agent framework. The agent — given the persona name “Strix” — used models served through OpenRouter, including DeepSeek V4.1 Flash and occasional calls to Gemini 2.5 Flash. The operator connected the agent to a Telegram bot, told it what to do, and let it plan and run repeated scripts. CloudSEK’s logs show Hermes wrote rules, executed collection tasks, and even cleaned up logs. Crucially, the initial break‑in came from stolen credentials, not the agent itself. The AI did the heavy lifting after access was already opened.
Scale and scope of the Tajikistan breach
The theft runs to more than two thousand unique documents. The haul included files tied to Tajikistan’s Ministry of Defence, the National Guard, the State Committee for National Security, and internal notes from over a hundred government offices and employees. CloudSEK also found evidence of other targets — a compromised server for Uzbekistan’s forestry platform and phishing decoys aimed at Turkmenistan. This looks like a regional espionage campaign, not a one‑off prank.
Why attacker-side AI matters
What this means for defense
Automating routine attack steps makes hackers faster and cleaner. An agent can run hours of reconnaissance, pull down documents, and scrub logs without a human babysitter. That shortens the time defenders have to spot and stop intruders. It also means less forensic evidence is left behind. In plain English: AI helps criminals scale and hide. Meanwhile, policy folks and tech companies keep debating rules while attackers upgrade their toolkits. Nice timing, if your goal is to make the rest of us scramble.
Call to action — tighten defenses before the next act
Governments and companies must act. Tighten credential hygiene, lock down privileged access, and push for better monitoring that looks for automated agent behavior. Tech firms that serve powerful models need tougher access controls and clearer abuse safeguards. And regional partners should share telemetry so attacks like this do not go unsaid. If we treat this like an academic problem, we will keep getting academic results — which means more stolen files, more geopolitical friction, and more headlines about “attacker‑side AI.” That’s not a future anyone should want.
