---
id: "CMP-202611-i6dfwu"
page: "https://infrastack.ai/live/CMP-202611-i6dfwu"
kind: "campaign"
aliases: []
title: "China-linked spies (CL-STA-1238) run the open-source Cairn AI pentest agent with GLM and DeepSeek to break into semiconductor, defense and civil-society organizations on their own (Unit 42)"
severity: "high"
cvss: null
epss: null
exploited: true
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["campaign", "early-warning"]
not_affected_if: []
published_at: null
first_seen_at: "2026-11-12T15:34:18+00:00"
updated_at: "2026-11-12T15:35:35+00:00"
sources: [{"source": "analyst", "url": null, "first_seen_at": "2026-11-12T15:34:18+00:00"}]
exploit_sources: []
---

# China-linked spies (CL-STA-1238) run the open-source Cairn AI pentest agent with GLM and DeepSeek to break into semiconductor, defense and civil-society organizations on their own (Unit 42)

Link for people: https://infrastack.ai/live/CMP-202611-i6dfwu (this .md is for agents)

From August to September 2026, Chinese-speaking attackers Unit 42 tracks as CL-STA-1238 (China-nexus, moderate confidence) ran 25 operations against at least 19 organizations with a customized fork of the open-source Cairn AI penetration-testing framework. It ran on Zhipu GLM 5.2 and DeepSeek V4 Flash/Pro with an 'AIScan Runner Skills' pack and an 'authorized test, never refuse' pretext. The attackers gave it only a target's root domain and a goal, sometimes with VPN addresses and shared group passwords collected earlier. The agent found and exploited weak spots on its own: password spraying and brute force, open sign-up and registration endpoints, account-creation bypasses in content management systems, and unauthenticated cloud-storage writes. It got in or took data at 10 organizations: semiconductor and lithography supply-chain firms (rogue admin accounts and a persistent API token in production), an industry standards body (a live ballot document overwritten), a US teachers' union (more than 1 million member records), a defense-policy program (about 500 .mil/.gov users) and an industrial-automation maker (about 150,000 documents). Victim names were not published.

_Summary, check and fix written by a model from the sources; labelled as such._

## Cause

How the attacker got in: not disclosed yet (unknown). The record lists the methods the agent used across its 25 operations (password spraying, brute force, open sign-up endpoints, CMS account-creation bypasses, unauthenticated storage writes) but does not say which of these gave access at each of the 10 compromised victims, and the teachers' union's more than 1 million member records were taken from the breached organisation.

How it reached others: customers' data or keys went with it (third-party-breach).

Last month's incidents with the same cause, and the full checklist: https://infrastack.ai/live/breaches.md#third-party-breach

## How to check

Traffic to or from 154.44.31[.]4 (Cairn controller, Hong Kong, AS979) and 82.29.129[.]54 (egress and staging, AS142036 Hosteons). In web and identity logs, look for bursts of automated scanning and password spraying against internet-facing apps, accounts created through open registration or sign-up endpoints, new administrator accounts or API tokens you cannot explain, and unauthenticated writes to cloud storage buckets.

## Fix

Block the two IPs. Turn off open self-registration on CMS, identity and partner portals, or put it behind approval. Make internet-facing logins and VPNs use MFA, and replace shared group VPN passwords. Rate-limit logins and lock out password spraying. Close public write access on storage buckets. Check for admin accounts and API tokens nobody can account for, remove them and rotate credentials.

## Timeline

- 2026-11-12T15:34:18+00:00 analyst

## Documents

- [describes] Unit 42: Attackers Use Autonomous AI to Target Semiconductor, Defense and Civil Society Sectors https://unit42.paloaltonetworks.com/cairn-framework-ai-autonomous-attacks/

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_