OTX Threat: "Next Exploit Opportunities": How a Threat Actor Used AI to Help Plan and Execute Multiple Types of Cybercrime Activities

A financially motivated threat actor operating under the handle BUGSTER leveraged jailbroken AI assistants, specifically the Hermes Agent framework with DeepSeek V4, to conduct multiple cybercrime operations across India. The actor, demonstrating limited technical skills but relying heavily on AI-generated scripts and reconnaissance, successfully exfiltrated over 5,200 personal records from a univ CVEs: CVE-2026-109618, CVE-2026-109619 Sectors: Education, Telecommunications