Back Securityaffairs.Co

Thailand’s Ministry of Finance Targeted With Hermes AI Agent Running Unattended, Hades Implant Staged

Securityaffairs.Co •Pierluigi Paganini • July 24, 2026

Hunt.io uncovered a cyber-espionage attack on Thailand’s Finance Ministry using Hermes AI agent and Hades malware for reconnaissance and persistence. Researchers at Hunt.io have uncovered an intrusion targeting Thailand’s Ministry of Finance that offers a rare look inside a live cyber-espionage operation. Instead of recovering malware after the fact, the team found exposed staging servers […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

AI-Driven Cyberattack Targets Thailand's Ministry of Finance A cyberattack utilizing the Hermes AI agent targeted Thailand's Ministry of Finance between July 9 and July 13, 2026. Researchers from Hunt.io discovered exposed directories containing 585 files, including exploit code and stolen credentials. The Hermes agent operated in unattended 'YOLO' mode, allowing it to autonomously navigate and compromise multiple internal systems. The attack exploited vulnerabilities in the ministry's Hadoop infrastructure and involved a previously undocumented Go implant named 'Hades'. Although the Ministry of Finance has not confirmed a breach, evidence suggests that sensitive personnel data may have been accessed. The incident underscores the risks associated with AI tools in cyberattacks, particularly when safety features are disabled. Thailand's national CERT was notified on July 15, 2026, but no public statement has been made as of July 24, 2026. 10 sources 70

Extracted Entities

Thailand’s Ministry of Finance Targeted With Hermes AI Agent Running Unattended, Hades Implant Staged

The full story

Extracted Entities

Attack Types (1)

Countries (1)

Domains (1)

Malware (3)