THREAT OPS › Threat News › PaperCut Attacker Uses Hundreds of AI Agents to Compromise 440+ Instances
PaperCut Attacker Uses Hundreds of AI Agents to Compromise 440+ Instances
A suspected Russian-speaking cyber actor has been attributed to the use of artificial intelligence (AI) to devise exploits targeting a recently disclosed pair of security flaws in PaperCut NG/MF and break into hundreds of instances.
According to independent reports from Blackpoint Cyber and GreyNoise, the activity originates from "45.142.193[.]132," an IP address that has been linked to
MITRE ATT&CK techniques
- Artificial IntelligenceT1588.007
Indicators of compromise
- 45.142.193.132ipv4