Chinese Actor Weaponizes Deepseek AI Agent to Attack Security Firm

Summary

Researchers at Jesta discovered a weaponized DeepSeek AI agent deployed by a Chinese threat actor targeting their organization and potentially over 1,200 other hosts. The agent was configured to conduct proxyjacking and facilitate further attacks. This represents a notable escalation in the use of large language models and AI systems as attack vectors by state-sponsored groups.

Indicators of Compromise

• malware — DeepSeek AI Agent (weaponized)

Entities