{"id":"CMP-202611-runtfn","kind":"campaign","aliases":[],"related":[],"title":"BOSSAI: single Taiwan-based attacker uses a 12-agent AI hacking setup on safety-stripped models to hit emergency services, banks and universities in 11+ countries; Taipei 119 dispatch records stolen (Acronis)","description":null,"summary":"Acronis Threat Research Unit (reported 9 Nov 2026 by The Hacker News) found the operational server of a single attacker it believes is based in Hualien City, Taiwan, running BOSSAI: 12 AI agents (9 in use) that scanned and attacked hundreds of organizations in at least 11 countries, including emergency services, banks, universities and military systems. Attack agents ran on 'abliterated' local DeepSeek, GLM and Qwen models; Grok built most infrastructure, and Claude Code, Codex and Cursor were pointed at the abliterated models. Confirmed data collection or access at about 10 organizations in Taiwan, Mexico and Thailand: Taipei 119 fire/ambulance dispatch records from a public-facing API, a Taipei fire department platform exposing patient data (ECG, ambulance video) without login since 2018, a fire-dispatch technology vendor's database admin panel via default root credentials, a Taiwanese lending firm via SQL injection, three Thai universities via SQL injection on unpatched Oracle databases, and about 206,800 Mexican home phone records. About 15 more organizations were attacked without a confirmed break-in. Researchers watched it for 12 days; one exchange is dated 25 July (year as reported, 2026). The attacks succeeded only against weakly protected systems; they failed where logins and filtering held. Whether victims or Taiwanese authorities were notified, and whether the operation is still active, is unknown.","severity":"medium","cvss":null,"epss":null,"exploited":true,"exploited_at":"2026-11-09T09:06:59+00:00","products":[],"ecosystems":[],"tags":["campaign","early-warning"],"not_affected_if":[],"how_to_check":"Acronis lists 9 IP addresses and 9 domains from the attacker's setup in its report; they are not reproduced in the news article and are not on file here (unknown until the Acronis report is read). Meanwhile look for: logins to database admin panels with default root credentials; SQL injection probing and brute-force against SSO portals; mass scanning of Oracle databases, public APIs and emergency-services/fire-dispatch systems, especially in Taiwan, Mexico and Thailand; secrets such as AES keys hardcoded in front-end JavaScript; scanner reports of non-existent CVEs (the attacker's tools hallucinated findings).","fix":"Remove default root credentials on database admin panels and do not expose them to the internet; require a login on every API and portal serving personal, medical or dispatch data; fix SQL injection and patch internet-facing Oracle databases; take hardcoded keys out of front-end JavaScript and rotate them; rate-limit and add MFA to SSO portals. Emergency services, lenders and universities in Taiwan, Mexico and Thailand should check their logs for the Acronis indicators once available.","status":"open","published_at":null,"first_seen_at":"2026-11-09T09:06:59+00:00","triaged_at":"2026-11-09T09:06:59+00:00","updated_at":"2026-11-09T09:08:17+00:00","category":"other","confidence":null,"triage":{"cause":{"at":"2026-11-09T09:11:15Z","path":"third-party-breach","entry":"unpatched-vuln","reason":"The record describes several different entry methods across victims (default root credentials, SQL injection, and unauthenticated public APIs), and SQL injection on unpatched Oracle databases is the most frequently named route, while a fire-dispatch technology vendor's database breach via default root credentials means dependent emergency services were affected through a third party.","confidence":0.4}},"analyst_status":"done","analyst_note":null,"search":"'-202611':36A '10':132B '11':27A,88B '119':30A,140B '12':9A,72B,220B '15':205B '2018':164B '2026':49B,231B '206':198B '25':226B '800':199B '9':47B,75B 'abliter':102B,123B 'access':129B 'acroni':34A,42B 'activ':260B 'admin':173B 'agent':10A,74B,99B 'ai':11A,73B 'ambul':159B 'api':149B 'attack':6A,61B,81B,98B,209B,233B 'author':251B 'bank':23A,93B 'base':5A,65B 'believ':63B 'bossai':1A,71B 'break':214B 'break-in':213B 'built':110B 'campaign':38B 'citi':68B 'claud':114B 'cmp':35A 'code':115B 'codex':116B 'collect':127B 'confirm':125B,212B 'countri':28A,89B 'credenti':178B 'cursor':118B 'data':126B,157B 'databas':172B,195B 'date':225B 'day':221B 'deepseek':104B 'default':176B 'depart':153B 'dispatch':31A,142B,168B 'earli':40B 'early-warn':39B 'ecg':158B 'emerg':21A,91B 'exchang':223B 'expos':155B 'face':148B 'fail':241B 'filter':245B 'fire':152B,167B 'fire-dispatch':166B 'fire/ambulance':141B 'firm':182B 'found':54B 'glm':105B 'grok':109B 'hack':12A 'hacker':52B 'held':246B 'hit':20A 'home':201B 'hualien':67B 'hundr':82B 'includ':90B 'infrastructur':112B 'inject':185B,191B 'juli':227B 'least':87B 'lend':181B 'local':103B 'login':162B,243B 'mexican':200B 'mexico':136B 'militari':96B 'model':18A,108B,124B 'news':53B 'notifi':253B 'nov':48B 'one':222B 'oper':56B,257B 'oracl':194B 'organ':84B,133B,207B 'panel':174B 'patient':156B 'phone':202B 'platform':154B 'point':120B 'protect':238B 'public':147B 'public-fac':146B 'qwen':107B 'ran':100B 'record':32A,143B,203B 'report':46B,230B 'research':44B,216B 'root':177B 'run':70B 'runtfn':37A 'safeti':16A 'safety-strip':15A 'scan':79B 'server':57B 'servic':22A,92B 'setup':13A 'sinc':163B 'singl':2A,60B 'sql':184B,190B 'still':259B 'stolen':33A 'strip':17A 'succeed':234B 'system':97B,239B 'taipei':29A,139B,151B 'taiwan':4A,69B,135B 'taiwan-bas':3A 'taiwanes':180B,250B 'technolog':169B 'thai':187B 'thailand':138B 'threat':43B 'three':186B 'unit':45B 'univers':25A,94B,188B 'unknown':262B 'unpatch':193B 'use':7A,77B 'vendor':170B 'via':175B,183B,189B 'victim':248B 'video':160B 'warn':41B 'watch':217B 'weak':237B 'whether':247B,255B 'without':161B,210B 'year':228B","nicknames":["BOSSAI"],"mitigations":[],"who_affected":null,"tier":"A","verified":{},"analyst_revisit_at":null,"fix_status":null,"audience":null,"plain_action":null,"pkeys":["bossai"],"ptokens":[],"labels":["campaign","earlywarning","medium","other"],"campaign_type":"breach","search_a":"'-202611':36A '11':27A '119':30A '12':9A 'acroni':34A 'agent':10A 'ai':11A 'attack':6A 'bank':23A 'base':5A 'bossai':1A 'cmp':35A 'countri':28A 'dispatch':31A 'emerg':21A 'hack':12A 'hit':20A 'model':18A 'record':32A 'runtfn':37A 'safeti':16A 'safety-strip':15A 'servic':22A 'setup':13A 'singl':2A 'stolen':33A 'strip':17A 'taipei':29A 'taiwan':4A 'taiwan-bas':3A 'univers':25A 'use':7A","search_b":"'10':132B '11':88B '119':140B '12':72B,220B '15':205B '2018':164B '2026':49B,231B '206':198B '25':226B '800':199B '9':47B,75B 'abliter':102B,123B 'access':129B 'acroni':42B 'activ':260B 'admin':173B 'agent':74B,99B 'ai':73B 'ambul':159B 'api':149B 'attack':61B,81B,98B,209B,233B 'author':251B 'bank':93B 'base':65B 'believ':63B 'bossai':71B 'break':214B 'break-in':213B 'built':110B 'campaign':38B 'citi':68B 'claud':114B 'code':115B 'codex':116B 'collect':127B 'confirm':125B,212B 'countri':89B 'credenti':178B 'cursor':118B 'data':126B,157B 'databas':172B,195B 'date':225B 'day':221B 'deepseek':104B 'default':176B 'depart':153B 'dispatch':142B,168B 'earli':40B 'early-warn':39B 'ecg':158B 'emerg':91B 'exchang':223B 'expos':155B 'face':148B 'fail':241B 'filter':245B 'fire':152B,167B 'fire-dispatch':166B 'fire/ambulance':141B 'firm':182B 'found':54B 'glm':105B 'grok':109B 'hacker':52B 'held':246B 'home':201B 'hualien':67B 'hundr':82B 'includ':90B 'infrastructur':112B 'inject':185B,191B 'juli':227B 'least':87B 'lend':181B 'local':103B 'login':162B,243B 'mexican':200B 'mexico':136B 'militari':96B 'model':108B,124B 'news':53B 'notifi':253B 'nov':48B 'one':222B 'oper':56B,257B 'oracl':194B 'organ':84B,133B,207B 'panel':174B 'patient':156B 'phone':202B 'platform':154B 'point':120B 'protect':238B 'public':147B 'public-fac':146B 'qwen':107B 'ran':100B 'record':143B,203B 'report':46B,230B 'research':44B,216B 'root':177B 'run':70B 'scan':79B 'server':57B 'servic':92B 'sinc':163B 'singl':60B 'sql':184B,190B 'still':259B 'succeed':234B 'system':97B,239B 'taipei':139B,151B 'taiwan':69B,135B 'taiwanes':180B,250B 'technolog':169B 'thai':187B 'thailand':138B 'threat':43B 'three':186B 'unit':45B 'univers':94B,188B 'unknown':262B 'unpatch':193B 'use':77B 'vendor':170B 'via':175B,183B,189B 'victim':248B 'video':160B 'warn':41B 'watch':217B 'weak':237B 'whether':247B,255B 'without':161B,210B 'year':228B","search_c":"","cause_entry":"unpatched-vuln","cause_path":"third-party-breach","disclosures_checked_at":"2026-11-09T09:17:52+00:00","first_public_at":"2026-11-09T00:00:00+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"analyst","external_id":"CMP-202611-runtfn","url":"https://thehackernews.com/2026/11/taiwan-based-hacker-used-bossai-ai.html","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-11-09T09:06:59+00:00","fetched_at":"2026-11-09T09:06:59+00:00","note":null,"cites":["https://thehackernews.com/2026/11/taiwan-based-hacker-used-bossai-ai.html"]}],"documents":[{"id":106676,"url":"https://x.com/TheHackersNews/status/2119717420487291121","title":"@TheHackersNews: 🚨 A single hacker in Taiwan used BOSSAI, a 12-agent AI hacking setup, to steal T","kind":"post","source":"x","publisher":null,"text":"🚨 A single hacker in Taiwan used BOSSAI, a 12-agent AI hacking setup, to steal Taipei emergency dispatch records.\n\nThe operation targeted hundreds of organizations across 11 countries, with confirmed data extraction in three.\n\nLearn More ↓ https://t.co/wNlpavj7dD\n\nlikes 23 reposts 6","published_at":"2026-11-09T09:03:10+00:00","relation":"describes","confidence":null,"note":null},{"id":106681,"url":"https://thehackernews.com/2026/11/taiwan-based-hacker-used-bossai-ai.html","title":"Taiwan-Based Hacker Used BOSSAI AI Agents to Steal Taipei Emergency Dispatch Records","kind":"blog","source":"analyst","publisher":null,"text":"THN (Swati Khandelwal, 9 Nov 2026) reporting Acronis Threat Research Unit analysis: single attacker based in Hualien City, Taiwan, ran BOSSAI, a 12-agent AI hacking setup (9 in use), against hundreds of organizations in at least 11 countries (emergency services, banks, universities, military). Data collected or systems accessed at about 10 orgs in Taiwan, Mexico, Thailand. Pulled Taipei 119 emergency dispatch records from a public-facing API (incident times, response types, case status, street-level locations); Taipei fire department platform exposed patient data since 2018 (ECG, ambulance video) without login. Fire-dispatch tech vendor: DB admin panel logged into with default root credentials (18+ tables). Emergency management system: hardcoded AES-256 key in front-end JS exposing session-cookie contents. National fire agency SSO portal brute-forced (no confirmed access). Taiwanese lending firm account table via SQL injection (16 injection points); three Thai universities via SQL injection on unpatched Oracle databases (489 potential targets across 45 institutions); Mexico about 206,800 home phone records. About 15 more orgs attacked without confirmed break-in. Attack agents ran on abliterated (safety-removed) local DeepSeek, GLM and Qwen models; Grok main builder; Claude Code and Codex redirected to abliterated model; Cursor used to attack a Taiwanese emergency-services site. Grok and MiniMax M3 refused direct attack requests. Observed 12 days; one exchange dated July 25. Evidence from attacker's own server (90,000+ files). Agents failed where logins were enforced and endpoints filtered. Nine IPs and nine domains in Acronis indicator list (not reproduced in article). Notification of victims unknown.","published_at":"2026-11-09T00:00:00+00:00","relation":"describes","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}