< Back to all clusters
[TECHNOLOGY] · Taiwan, Japan · 5 sources

started · updated

Cybersecurity threats rise as hackers target infrastructure and AI crime tools proliferate

Cybersecurity research highlights a growing underground economy centered on targeting critical infrastructure and utilizing artificial intelligence for criminal activities.

TrendAI reports that the pro-Russian hacker group Z-Pentest has been targeting energy, water, oil, gas, and manufacturing sectors in Taiwan, the US, and NATO member states since September 2024. The group has demonstrated operational technology (OT) attack capabilities, using Telegram to share evidence of successful intrusions. Research indicates a surge in industrial sector leaks, with 3,178 related sites identified between 2024 and mid-2026. High-value Access-as-a-Service (AaaS) listings, providing remote access to critical systems, are frequently priced above $100,000.

Simultaneously, Trellix has identified a shift in the dark web market where AI is being commodified for cybercrime. Criminals are purchasing specialized tools like 'APEX AI' to design attack paths and 'Metamorphic Crypter' to bypass EDR security detection. Furthermore, 'MessiahGPT' is being marketed as an AI service stripped of ethical constraints and safety alignments, specifically intended for ransomware, phishing, and malware development.

Entities

BreachForums · Trellix · TrendAI · Z-Pentest

Claims

What the coverage asserts, and how many sources carry each claim.

  • [○ 1 SOURCE] Underground forums are trading AI-driven tools designed to bypass EDR (Endpoint Detection and Response) security products. atmarkit.itmedia.co.jp
  • [○ 1 SOURCE] Between January 2024 and June 2026, 3,178 data leak sites involving industrial, energy, and manufacturing (IE&M) organizations were identified. infosecu.technews.tw
  • [○ 1 SOURCE] A tool called MessiahGPT is being marketed on BreachForums as an AI service without ethical constraints or safety alignments. atmarkit.itmedia.co.jp
  • [○ 1 SOURCE] Thirty-six percent of Access-as-a-Service (AaaS) listings in the underground economy are priced above $100,000 USD. infosecu.technews.tw
  • [○ 1 SOURCE] The pro-Russian hacker group Z-Pentest has targeted Taiwan's energy, water, oil, gas, and manufacturing sectors since September 2024. infosecu.technews.tw