Kaspersky Reveals First Real-World CyberStrikeAI Attack Using LLM-Orchestrated C2

Kaspersky disclosed a real-world attack dubbed CyberStrikeAI, where an LLM orchestrator on the C2 server automated post-exploitation from reconnaissance to full domain takeover within about an hour, hitting education organizations in Africa and Latin America.

2026-11-03 ~ 2026-11-05 · 2 related posts

• Kaspersky reports real-world CyberStrikeAI attack: LLM orchestrator drove recon to full domain compromise — cyb3rops · 2026-11-03
• Kaspersky reports CyberStrikeAI: AI-driven C2 compromises domains in under an hour — cyb3rops · 2026-11-05