Knaithe/KnYuan is an apt_group tracked by ThreatCluster, appearing in 1 threat cluster built from 1 intelligence report mention.
Knaithe/KnYuan is a apt_group tracked across 1 threat cluster and 1 intelligence report mention on ThreatCluster. First observed August 1, 2026; most recent activity August 1, 2026.
A Chinese-speaking threat actor, identified as knaithe/KnYuan, executed an autonomous cyberattack campaign using DeepSeek AI and the Hermes Agent framework. The campaign targeted over 460 servers, attempting to exploit…
Knaithe/KnYuan is an apt_group tracked by ThreatCluster, appearing in 1 threat cluster built from 1 intelligence report mention.
The most recent intelligence report mentioning Knaithe/KnYuan on ThreatCluster is dated August 1, 2026.
Across ThreatCluster reporting, Knaithe/KnYuan most frequently co-occurs with Anthropic, Langflow, OpenAI, ExploitGym, GitHub, among 12 tracked related entities.
The most significant recent cluster is “DeepSeek AI Used in Autonomous Cyberattack Campaign by Chinese Threat Actor” (5 articles · Updated August 2, 2026). Knaithe/KnYuan appears across 1 threat cluster in total, listed above with sources.
Knaithe/KnYuan appears in 1 intelligence report mention across 1 deduplicated threat cluster, aggregated from 17,000+ monitored sources.