--- id: "CMP-202611-runtfn" page: "https://infrastack.ai/live/CMP-202611-runtfn" kind: "campaign" aliases: [] title: "BOSSAI: single Taiwan-based attacker uses a 12-agent AI hacking setup on safety-stripped models to hit emergency services, banks and universities in 11+ countries; Taipei 119 dispatch records stolen (Acronis)" severity: "medium" cvss: null epss: null exploited: true status: "open" category: "other" products: [] ecosystems: [] tags: ["campaign", "early-warning"] not_affected_if: [] published_at: null first_seen_at: "2026-11-09T09:06:59+00:00" updated_at: "2026-11-09T09:08:17+00:00" sources: [{"source": "analyst", "url": "https://thehackernews.com/2026/11/taiwan-based-hacker-used-bossai-ai.html", "first_seen_at": "2026-11-09T09:06:59+00:00", "cites": ["https://thehackernews.com/2026/11/taiwan-based-hacker-used-bossai-ai.html"]}] exploit_sources: [] --- # BOSSAI: single Taiwan-based attacker uses a 12-agent AI hacking setup on safety-stripped models to hit emergency services, banks and universities in 11+ countries; Taipei 119 dispatch records stolen (Acronis) Link for people: https://infrastack.ai/live/CMP-202611-runtfn (this .md is for agents) Acronis Threat Research Unit (reported 9 Nov 2026 by The Hacker News) found the operational server of a single attacker it believes is based in Hualien City, Taiwan, running BOSSAI: 12 AI agents (9 in use) that scanned and attacked hundreds of organizations in at least 11 countries, including emergency services, banks, universities and military systems. Attack agents ran on 'abliterated' local DeepSeek, GLM and Qwen models; Grok built most infrastructure, and Claude Code, Codex and Cursor were pointed at the abliterated models. Confirmed data collection or access at about 10 organizations in Taiwan, Mexico and Thailand: Taipei 119 fire/ambulance dispatch records from a public-facing API, a Taipei fire department platform exposing patient data (ECG, ambulance video) without login since 2018, a fire-dispatch technology vendor's database admin panel via default root credentials, a Taiwanese lending firm via SQL injection, three Thai universities via SQL injection on unpatched Oracle databases, and about 206,800 Mexican home phone records. About 15 more organizations were attacked without a confirmed break-in. Researchers watched it for 12 days; one exchange is dated 25 July (year as reported, 2026). The attacks succeeded only against weakly protected systems; they failed where logins and filtering held. Whether victims or Taiwanese authorities were notified, and whether the operation is still active, is unknown. _Summary, check and fix written by a model from the sources; labelled as such._ ## Cause How the attacker got in: a known vulnerability left unpatched (unpatched-vuln). The record describes several different entry methods across victims (default root credentials, SQL injection, and unauthenticated public APIs), and SQL injection on unpatched Oracle databases is the most frequently named route, while a fire-dispatch technology vendor's database breach via default root credentials means dependent emergency services were affected through a third party. How it reached others: customers' data or keys went with it (third-party-breach). So it does not happen to you: Your board lists the advisories that are in range for your stack, with the fix version. Last month's incidents with the same cause, and the full checklist: https://infrastack.ai/live/causes.md#third-party-breach ## How to check Acronis lists 9 IP addresses and 9 domains from the attacker's setup in its report; they are not reproduced in the news article and are not on file here (unknown until the Acronis report is read). Meanwhile look for: logins to database admin panels with default root credentials; SQL injection probing and brute-force against SSO portals; mass scanning of Oracle databases, public APIs and emergency-services/fire-dispatch systems, especially in Taiwan, Mexico and Thailand; secrets such as AES keys hardcoded in front-end JavaScript; scanner reports of non-existent CVEs (the attacker's tools hallucinated findings). ## Fix Remove default root credentials on database admin panels and do not expose them to the internet; require a login on every API and portal serving personal, medical or dispatch data; fix SQL injection and patch internet-facing Oracle databases; take hardcoded keys out of front-end JavaScript and rotate them; rate-limit and add MFA to SSO portals. Emergency services, lenders and universities in Taiwan, Mexico and Thailand should check their logs for the Acronis indicators once available. ## Timeline - 2026-11-09T09:06:59+00:00 analyst https://thehackernews.com/2026/11/taiwan-based-hacker-used-bossai-ai.html ## Documents - [describes] @TheHackersNews: 🚨 A single hacker in Taiwan used BOSSAI, a 12-agent AI hacking setup, to steal T https://x.com/TheHackersNews/status/2119717420487291121 - [describes] Taiwan-Based Hacker Used BOSSAI AI Agents to Steal Taipei Emergency Dispatch Records https://thehackernews.com/2026/11/taiwan-based-hacker-used-bossai-ai.html --- _Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_