Evidence · DiggingBeagle record
Kaspersky Securelist: CyberStrikeAI attacks educational institutions
Kaspersky investigation of real education-sector compromises using an ARTEX-adjacent agentic command-and-control framework.
- Source role
- primary disclosure
Evidence record
Kaspersky investigation of real education-sector compromises using an ARTEX-adjacent agentic command-and-control framework.
Claim-level citations (2)
- supportsCyberStrikeAI appears in observed education-sector credential theft and database export: Kaspersky documented CyberStrikeAI-related activity during compromises of educational institutions in Africa and Latin America, including directory reconnaissance, lateral movement and database export.
Observed attacks; attack timeline and lateral movement
- supportsCyberStrikeAI appears in observed education-sector credential theft and database export: The reported endpoint Go implant did not contain an LLM; AI-backed planning and tool routing occurred remotely in the controller environment.
CyberStrikeAI architecture and MCP orchestrator