OTX Threat: Chinese-Speaking Operator Uses AI Agents to Target Government and Education Systems Across Asia

A Chinese-speaking threat operator deployed an AI orchestration framework called SecFlow to conduct intrusions across Taiwan, Indonesia, China, Vietnam, and Afghanistan. The campaign utilized commercial AI models (Claude, Qwen, DeepSeek) as operational components for reconnaissance, exploitation, and data collection. The most significant compromise affected a Fengtai District government environmen CVEs: CVE-2014-6271, CVE-2016-4437, CVE-2020-1938, CVE-2021-29441, CVE-2021-44228 Sectors: Governme