We detected 280 servers running CyberStrikeAI, an open-source AI-driven attack platform with its own C2, starting from a single ThreatFox alert. Around 200 have no record in any threat intel feed.
In this article we point out weaknesses in a live ClickFix operator's infrastructure. We showcase a method to preemptively detect threats by monitoring certain points of it.
