OFFENSIVE INTEL

Agent-TCP — Go RAT compiled for 14 CPU architectures, deployed via WordPress pre-auth SQLi and IoT mass compromise targeting Ubiquiti, D-Link, and Totolink devices across Taiwan, Japan, and the US. Active C2: v9g6.my.

Precedent-setting botnet combining generic MCP exploitation, automated multi-step lateral movement planning, and AI/LLM infrastructure targeting with emerging defense-awareness capabilities.