Follow us on Google News
A Kazakhstan-linked hacking group allegedly used artificial intelligence to steal more than 2,000 national security-related documents from Tajikistan’s government systems. Cybersecurity researchers discovered that the attackers employed an autonomous AI framework to conduct espionage, identify vulnerabilities and extract sensitive information.
How Was the Attack Discovered?
Cybersecurity researchers uncovered the operation after discovering an internet-exposed server containing records of the attackers’ activities. The exposed information revealed how the hackers used an open-source autonomous AI agent framework called Hermes to conduct the intrusion.
Investigators found evidence that the attackers began reconnaissance around mid-August and gained access to Tajikistan’s electronic document system within approximately two weeks.
The discovery revealed how automated AI technology was being used to support government-targeted cyberespionage.
How Did Hackers Use AI?
Instead of manually entering hacking commands, the attackers reportedly instructed Hermes to carry out specific objectives. The AI framework planned operations, created execution rules, maintained records and generated reports describing its progress.
Researchers found that the attackers used the technology to automate several stages of the intrusion, reducing the need for continuous human involvement.
https://the420.in/fcrf-certified-chief-ai-officer-second-cohort-november-2026/
Instructions recovered from the exposed infrastructure described the AI agent as an elite offensive security specialist and red teamer, terminology normally associated with professionals conducting authorised security assessments.
What Information Was Stolen?
The operation reportedly resulted in the theft of more than 2,000 documents related to Tajikistan’s national security.
Researchers said the AI agent developed a custom programme to download files, organise the information and divide documents into smaller sections for extraction. The stolen material was obtained from Tajikistan’s government electronic documentation system.
The use of automated tools enabled the attackers to manage and extract large quantities of information through a coordinated process.
Who Was Behind the Attack?
Cybersecurity researchers linked the operation to a hacking group known as Silent Lynx, which has previously been associated with Kazakhstan. Investigators identified several indicators suggesting a connection to the country.
These included Russian-language communications, activity during Kazakh business hours and access to the exposed infrastructure through a residential internet connection in Kazakhstan.
The indicators supported the researchers’ assessment of the group’s possible location, rather than establishing direct involvement by the Kazakh government.
Why Is This Attack Significant?
The incident demonstrates how artificial intelligence is increasingly being used in sophisticated cyberespionage operations.
AI agents can perform technical tasks, organise collected information and execute instructions without requiring attackers to manually control every stage. In this case, the technology reportedly helped the hackers conduct reconnaissance, access government systems and extract sensitive documents.
The findings suggest that autonomous AI frameworks are becoming useful tools for espionage-focused threat actors. Such technology can potentially reduce the time and effort required to conduct complex cyber operations.
What Does This Mean for Cybersecurity?
The attack highlights growing security risks for government agencies and organisations responsible for confidential information.
Autonomous AI tools can accelerate cyber intrusions by automating reconnaissance, vulnerability identification and data extraction.The incident also demonstrates how exposed infrastructure can reveal the methods and activities of sophisticated hacking groups. For organisations managing sensitive records, the case reinforces the importance of securing electronic documentation systems, restricting unauthorised access and monitoring suspicious automated activity.
The suspected theft of more than 2,000 government documents illustrates how AI-assisted cyberespionage can threaten national security information and complicate efforts to protect critical digital infrastructure.
